In the Linux kernel, the following vulnerability has been resolved:

nfsd: don't ignore the return code of svc_proc_register()

Currently, nfsd_proc_stat_init() ignores the return value of
svc_proc_register(). If the procfile creation fails, then the kernel
will WARN when it tries to remove the entry later.

Fix nfsd_proc_stat_init() to return the same type of pointer as
svc_proc_register(), and fix up nfsd_net_init() to check that and fail
the nfsd_net construction if it occurs.

svc_proc_register() can fail if the dentry can't be allocated, or if an
identical dentry already exists. The second case is pretty unlikely in
the nfsd_net construction codepath, so if this happens, return -ENOMEM.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00088.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
10ece754df9a799131a1cf3197e9d26c04ddec22 affected < 51da899c209a9624e48be416bd30e7ed5cd6c3d8
6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c affected < 30405b23b4d5e2a596fb756d48119d7293194e75
93483ac5fec62cc1de166051b219d953bb5e4ef4 affected < 6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0
93483ac5fec62cc1de166051b219d953bb5e4ef4 affected < e31957a819e60cf0bc9a49408765e6095fd3d046
93483ac5fec62cc1de166051b219d953bb5e4ef4 affected < 9d9456185fd5f1891c74354ee297f19538141ead
93483ac5fec62cc1de166051b219d953bb5e4ef4 affected < 930b64ca0c511521f0abdd1d57ce52b2a6e3476b
5545496966631cd40ad3aa6450be56d0e5773d10 affected —
73c43bccf25cec9cdec62fc22a513c28a4b28390 affected —
b7b05f98f3f06fea3986b46e5c7fe2928676b02d affected —
Linux Linux affected
Version Status Constraints
6.9 affected —
0 unaffected < 6.9
6.1.164 unaffected ≤ 6.1.*
6.6.125 unaffected ≤ 6.6.*
6.12.24 unaffected ≤ 6.12.*
6.13.12 unaffected ≤ 6.13.*
6.14.2 unaffected ≤ 6.14.*
6.15 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2025-11263 In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix nfsd_proc_stat_init() to return the same type of pointer as svc_proc_register(), and fix up nfsd_net_init() to check that and fail the nfsd_net construction if it occurs. svc_proc_register() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.
Ubuntu USN Ubuntu USN USN-7594-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7594-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7594-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-2 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-8031-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-3 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-4 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8031-2 Linux kernel (GCP FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-6 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-8031-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8052-1 Linux kernel (Low Latency) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-7 Linux kernel (Low Latency NVIDIA) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/30405b23b4d5e2a596fb756d48119d7293194e75 cve-icon cve-icon
https://git.kernel.org/stable/c/51da899c209a9624e48be416bd30e7ed5cd6c3d8 cve-icon cve-icon
https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0 cve-icon cve-icon
https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b cve-icon cve-icon
https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead cve-icon cve-icon
https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025041654-CVE-2025-22026-f6be@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-22026 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-22026 cve-icon
History

Thu, 19 Feb 2026 16:15:00 +0000

Type Values Removed Values Added
References

Mon, 16 Feb 2026 09:30:00 +0000

Type Values Removed Values Added
References

Tue, 28 Oct 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Tue, 27 May 2025 03:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-252
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Sun, 20 Apr 2025 08:45:00 +0000

Type Values Removed Values Added
References

Sat, 19 Apr 2025 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 16 Apr 2025 14:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix nfsd_proc_stat_init() to return the same type of pointer as svc_proc_register(), and fix up nfsd_net_init() to check that and fail the nfsd_net construction if it occurs. svc_proc_register() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.
Title nfsd: don't ignore the return code of svc_proc_register()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-19T15:39:11.606Z

Reserved: 2024-12-29T08:45:45.807Z

Link: CVE-2025-22026

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2025-04-16T15:15:55.237

Modified: 2026-02-19T16:27:08.923

Link: CVE-2025-22026

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-04-16T00:00:00Z

Links: CVE-2025-22026 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses