nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warning below [1] following a fault injection in nfs_fs_proc_net_init(). [0] When nfs_fs_proc_net_init() fails, /proc/net/rpc/nfs is not removed. Later, rpc_proc_exit() tries to remove /proc/net/rpc, and the warning is logged as the directory is not empty. Let's handle the error of nfs_fs_proc_net_init() properly. [0]: FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 6120 Comm: syz.2.27 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: dump_stack_lvl (lib/dump_stack.c:123) should_fail_ex (lib/fault-inject.c:73 lib/fault-inject.c:174) should_failslab (mm/failslab.c:46) kmem_cache_alloc_noprof (mm/slub.c:4178 mm/slub.c:4204) __proc_create (fs/proc/generic.c:427) proc_create_reg (fs/proc/generic.c:554) proc_create_net_data (fs/proc/proc_net.c:120) nfs_fs_proc_net_init (fs/nfs/client.c:1409) nfs_net_init (fs/nfs/inode.c:2600) ops_init (net/core/net_namespace.c:138) setup_net (net/core/net_namespace.c:443) copy_net_ns (net/core/net_namespace.c:576) create_new_namespaces (kernel/nsproxy.c:110) unshare_nsproxy_namespaces (kernel/nsproxy.c:218 (discriminator 4)) ksys_unshare (kernel/fork.c:3123) __x64_sys_unshare (kernel/fork.c:3190) do_syscall_64 (a
CVE-2025-38400
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2025-38400
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "31dd0cda5aa0547de447aaf184812f85ccc34044",
"lessThan": "8785701fd7cd52ae74c0d2b35b82568df74e9dbb",
"versionType": "git"
},
{
"status": "affected",
"version": "6eef21eb7a165601882dad0419a630e32d2d7a2c",
"lessThan": "412534a1fb76958b88dca48360c6f3ad4f3390f4",
"versionType": "git"
},
{
"status": "affected",
"version": "0bbd429260821dfb81478749837d3e6377949ac6",
"lessThan": "b92397ce96743e4cc090207e2df2a856cb4cef08",
"versionType": "git"
},
{
"status": "affected",
"version": "9dd86e9d34b1078dcd647220e96a205028bf4e6f",
"lessThan": "7701c245ff1ac1a126bf431e72b24547519046ff",
"versionType": "git"
},
{
"status": "affected",
"version": "53a0365c9f9f66e1a981bf9188d8716d682e0739",
"lessThan": "d0877c479f44fe475f4c8c02c88ce9ad43e90298",
"versionType": "git"
},
{
"status": "affected",
"version": "d47151b79e3220e72ae323b8b8e9d6da20dc884e",
"lessThan": "3c94212b57bedec3a386ef3da1ef00602f5c3d1d",
"versionType": "git"
},
{
"status": "affected",
"version": "d47151b79e3220e72ae323b8b8e9d6da20dc884e",
"lessThan": "6acf340f8c1d296bcf535986175f5d0d6f2aab09",
"versionType": "git"
},
{
"status": "affected",
"version": "d47151b79e3220e72ae323b8b8e9d6da20dc884e",
"lessThan": "e8d6f3ab59468e230f3253efe5cb63efa35289f7",
"versionType": "git"
},
{
"status": "affected",
"version": "e05194baae299f2148ab5f6bab659c6ce8d1f6d3",
"versionType": "git"
},
{
"status": "affected",
"version": "5.4.276",
"lessThan": "5.4.296",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.217",
"lessThan": "5.10.240",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.159",
"lessThan": "5.15.187",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.91",
"lessThan": "6.1.144",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.31",
"lessThan": "6.6.97",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.8.10",
"lessThan": "6.9",
"versionType": "semver"
}
],
"programFiles": [
"fs/nfs/inode.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.9"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.9",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.4.296",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.240",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.187",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.144",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.97",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.37",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.15.6",
"versionType": "semver",
"lessThanOrEqual": "6.15.*"
},
{
"status": "unaffected",
"version": "6.16",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/nfs/inode.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2025-38400
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #27034 · Revision 1
- Added to Heist Feed
- Publisher date