procfs

A subtle error-handling bug in the Linux kernel's NFS code — tracked as CVE-2025-38400 — has been fixed: when the initialization routine nfs_fs_proc_net_init fails, the kernel could leave behind a /proc/net/rpc/nfs entry and later log warnings or leak state during namespace teardown, a problem...

A subtle race in the Linux kernel’s ATM driver that left a small window where procfs entries could be double-registered has been cataloged as CVE-2025-38245 and fixed upstream with a small but important ordering change: make sure the atm_dev_mutex is held until procfs/sysfs entries are fully...

A small, defensive change landed in the upstream Linux kernel to address CVE‑2025‑40193 — a local input‑validation bug in the Xtensa simdisk procfs handler that could let an attacker supply an arbitrarily large size to memdup_user_nul and trigger a kernel crash — the fix adds an explicit input...

runc’s handling of procfs writes contains a dangerous race-and-redirect weakness that allows an attacker to bypass Linux Security Module (LSM) labels by misdirecting writes to fake or otherwise benign procfs files, creating a practical path to disable container confinement and to weaponize...