Threats tagged 'ghsa-jr2f-554p-cmvr'

CVE-2025-22025 is a vulnerability in the Linux kernel's NFS server (nfsd) related to reference count management of delegation state identifiers (dl_stid). When queuing a delegation recall callback fails, the reference count of dl_stid is not decremented, causing a memory leak. This flaw leads to unreferenced objects accumulating in kernel memory, potentially causing resource exhaustion and denial of service. The issue has been fixed by adding a check on the callback queuing result and releasing the reference if queuing fails.