CVE-2025-22026

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22026
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix nfsd_proc_stat_init() to return the same type of pointer as svc_proc_register(), and fix up nfsd_net_init() to check that and fail the nfsd_net construction if it occurs. svc_proc_register() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0 Patch
https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b Patch
https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead Patch
https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 Oct 2025, 18:57

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfsd: no ignore el código de retorno de svc_proc_register() Actualmente, nfsd_proc_stat_init() ignora el valor de retorno de svc_proc_register(). Si la creación de procfile falla, el kernel emitirá una ADVERTENCIA cuando intente eliminar la entrada posteriormente. Corrija nfsd_proc_stat_init() para que devuelva el mismo tipo de puntero que svc_proc_register() y corrija nfsd_net_init() para que lo compruebe y falle la construcción de nfsd_net si ocurre. svc_proc_register() puede fallar si no se puede asignar la dentry o si ya existe una dentry idéntica. El segundo caso es bastante improbable en la ruta de código de construcción de nfsd_net, por lo que si esto sucede, devuelva -ENOMEM.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-252
References () https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0 - () https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0 - Patch
References () https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b - () https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b - Patch
References () https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead - () https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead - Patch
References () https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046 - () https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046 - Patch

20 Apr 2025, 09:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0 -
  • () https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046 -

16 Apr 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:15

Updated : 2025-10-28 18:57

NVD link : CVE-2025-22026

Mitre link : CVE-2025-22026

CVE.ORG link : CVE-2025-22026

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-252

Unchecked Return Value