CVE-2025-22019

bcachefs: bch2_ioctl_subvolume_destroy() fixes

State: Published
Severity: 7.3 High
Published: Apr 16, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bcachefs: bch2_ioctl_subvolume_destroy() fixes

bch2_evict_subvolume_inodes() was getting stuck - due to incorrectly pruning the dcache.

Also, fix missing permissions checks.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a to before 9e6e83e1e2d01b99e70cd7812d7f758a8def9fc8Affected 1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a to before 82383abd39abd635511b8956284a5cc8134c4dc1Affected 1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a to before 558317a5c61045d460a37372181e7b43c0c002bbAffected 1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a to before 707549600c4a012ed71c0204a7992a679880bf33Affected
LinuxLinux	6.7Affected before 6.7Not affected 6.12.22 through 6.12.Not affected 6.13.10 through 6.13.Not affected 6.14.2 through 6.14.*Not affected 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.