PT-2025-20356 · Linux+4 · Linux Kernel+4

Published

2025-03-17

·

Updated

2026-04-20

·

CVE-2025-37827

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A bug in the Linux kernel has been resolved, related to the btrfs file system. The issue occurs when a RAID1 block group is created and a write pointer mismatch between the disks in the RAID set is detected. This can lead to a NULL pointer dereference in the btrfs add free space zoned() function. The error message "BTRFS error (device sdc): zoned: write pointer offset mismatch of zones in raid1 profile" is associated with this issue. The code expects a balance operation to evacuate the data in the block group and repair the problems, but before this is possible, the new space of the block group will be accounted for in the free space cache.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-12147
CVE-2025-37827
USN-7594-1
USN-7594-2
USN-7594-3
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu