PT-2025-13216 · Linux+1 · Linux Kernel+1
Published
2025-02-15
·
Updated
2025-03-28
·
CVE-2025-21879
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free issue has been identified in the Linux kernel, specifically in the btrfs file system. The issue occurs when scanning the root during em shrinking, where the
btrfs scan root() function accesses the inode's root and fs info after scheduling the inode for a delayed iput. This can result in a use-after-free on the inode if the cleaner kthread performs the iput before the inode is dereferenced in the call to btrfs fs closing(). The issue is resolved by using the fs info stored in a local variable instead of accessing it through inode->root->fs info.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel