Executive brief
A vulnerability in the Linux kernel's Network File System (NFS) component could allow a local user to cause a system instability or denial of service. The issue occurs when the system fails to properly clean up internal tracking files during a specific initialization failure. This can lead to kernel warnings and potential resource leaks that impact the reliability of the operating system.
Technical details
A resource leak vulnerability exists in the Linux kernel NFS client implementation. When nfs_fs_proc_net_init() fails (e.g., due to memory allocation failure during fault injection), the directory /proc/net/rpc/nfs is not removed. This causes a subsequent call to rpc_proc_exit() to fail when attempting to remove the parent /proc/net/rpc directory because it is not empty, triggering a kernel warning. An attacker with local access could potentially exploit this to cause resource exhaustion or trigger kernel panics in specific configurations. The fix involves adding proper error handling to nfs_net_init to ensure rpc_proc_unregister is called if initialization fails.
Affected products
- Linux Linux Kernel 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e
Timeline
- 2025-07-25: advisory: CVE published by NVD
- 2025-06-12: patched: Fix committed to stable tree
References
- https://git.kernel.org/stable/c/3c94212b57bedec3a386ef3da1ef00602f5c3d1d
- https://git.kernel.org/stable/c/412534a1fb76958b88dca48360c6f3ad4f3390f4
- https://git.kernel.org/stable/c/6acf340f8c1d296bcf535986175f5d0d6f2aab09
- https://git.kernel.org/stable/c/7701c245ff1ac1a126bf431e72b24547519046ff
- https://git.kernel.org/stable/c/8785701fd7cd52ae74c0d2b35b82568df74e9dbb
- https://git.kernel.org/stable/c/b92397ce96743e4cc090207e2df2a856cb4cef08
- https://git.kernel.org/stable/c/d0877c479f44fe475f4c8c02c88ce9ad43e90298