CVE-2025-38243

btrfs: fix invalid inode pointer dereferences during log replay

State
Published
Severity
Not scored
Published
Jul 9, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix invalid inode pointer dereferences during log replay

In a few places where we call read_one_inode(), if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of __add_inode_ref(), where we then do something like this:

iput(&inode->vfs_inode);

which results in an invalid inode pointer that triggers an invalid memory access, resulting in a crash.

Fix this by making sure we don't do such dereferences.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0502d1127436a69b8c2e7cf309ae0ebff3332668 to before 401d098f92ea69d8a75f8b845daf343e511681baAffected
  • b4c50cbb01a1b6901d2b94469636dd80fa93de81 to before ba8386d662cc51cc5382688bbf7a152b0b0b27cfAffected
  • b4c50cbb01a1b6901d2b94469636dd80fa93de81 to before 2dcf838cf5c2f0f4501edaa1680fcad03618d760Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.15.5 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.