CVE-2025-22024

Summary

CVE-2025-22024 is a vulnerability affecting the Linux kernel's NFS (Network File System) service, specifically the nfsd component. This issue arises when a root user utilizes the nfsdctl command to remove a listener from the list of previously added ones, but the server's sp_xprts list is not updated accordingly. As a result, a use-after-free error occurs when no active threads are running, leading to potential memory corruption and system instability. To mitigate this vulnerability, the Linux kernel now deletes all existing listener transports and recreates all but the removed ones when an attempt is made to remove a listener using the nfsdctl command.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.