The Linux kernel's nfsd initialization had a flaw where nfsd_debugfs_init() ran before nfsd4_init_slabs() in init_nfsd(). If slab allocation failed, the early return bypassed nfsd_debugfs_exit(), leaving orphan debugfs files with stale function pointers referencing freed module text. The patch reorders initialization so that nfsd_debugfs_init() occurs only after slab allocation succeeds, ensuring no debugfs state exists to clean up on early return. Cleanup order was also updated to run nfsd_debugfs_exit() before nfsd4_free_slabs() to maintain proper reverse-initialization order. This change prevents stale debugfs references without functional impact on module behavior.

If slab allocation failed during nfsd initialization, orphan debugfs files with stale function pointers could remain, potentially leading to use-after-free conditions or kernel instability. The vulnerability could cause kernel memory corruption or crashes due to references to freed module text. However, no known exploits in the wild have been reported.

A fix has been implemented by reordering the initialization and cleanup calls in the Linux kernel source code for nfsd. Users should update to a Linux kernel version that includes this fix. No additional mitigation steps are required beyond applying the official patch.