Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38243

btrfs: fix invalid inode pointer dereferences during log replay

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call read_one_inode(), if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of __add_inode_ref(), where we then do something like this: iput(&inode->vfs_inode); which results in an invalid inode pointer that triggers an invalid memory access, resulting in a crash. Fix this by making sure we don't do such dereferences.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0502d1127436a69b8c2e7cf309ae0ebff3332668 to < 401d098f92ea69d8a75f8b845daf343e511681baaffected
  • b4c50cbb01a1b6901d2b94469636dd80fa93de81 to < ba8386d662cc51cc5382688bbf7a152b0b0b27cfaffected
  • b4c50cbb01a1b6901d2b94469636dd80fa93de81 to < 2dcf838cf5c2f0f4501edaa1680fcad03618d760affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.15.5 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References