CVE-2025-71295

fs/buffer: add alert in try_to_free_buffers() for folios without buffers

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 23, 2026
Reserved
May 6, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/buffer: add alert in try_to_free_buffers() for folios without buffers

try_to_free_buffers() can be called on folios with no buffers attached when filemap_release_folio() is invoked on a folio belonging to a mapping with AS_RELEASE_ALWAYS set but no release_folio operation defined.

In such cases, folio_needs_release() returns true because of the AS_RELEASE_ALWAYS flag, but the folio has no private buffer data. This causes try_to_free_buffers() to call drop_buffers() on a folio with no buffers, leading to a null pointer dereference.

Adding a check in try_to_free_buffers() to return early if the folio has no buffers attached, with WARN_ON_ONCE() to alert about the misconfiguration. This provides defensive hardening.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d0eafc763135508be118dac208887a26c0adb74d to before 1b111a69a6e33a922622bf9870e4e63fb2b649c8Affected
  • b4fa966f03b7401ceacd4ffd7227197afb2b8376 to before c1b6227555c52781178132b7a06466711855795cAffected
  • b4fa966f03b7401ceacd4ffd7227197afb2b8376 to before 727e5140e0cf83b4ce6a11b89bb73bff5d96f8f3Affected
  • b4fa966f03b7401ceacd4ffd7227197afb2b8376 to before 42c32d7571ccd8ef32351cac506f00b0fae99fd2Affected
  • b4fa966f03b7401ceacd4ffd7227197afb2b8376 to before c6246ca15999053d2632fbcc7b86e6eef7f077cbAffected
  • b4fa966f03b7401ceacd4ffd7227197afb2b8376 to before b68f91ef3b3fe82ad78c417de71b675699a8467cAffected
  • 6.1.72 to before 6.1.165Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.1.165 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.