PT-2025-30758 · Btrfs+2 · Btrfs+2

Published

2025-06-04

·

Updated

2025-07-25

·

CVE-2025-38358

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to a race condition between the asynchronous reclaim worker and the close ctree() function within the Btrfs filesystem. This issue arises from an incorrect order of operations during filesystem unmounting and asynchronous reclamation, potentially leading to an assertion failure. Specifically, the race occurs when the asynchronous metadata reclaim worker attempts to add a delayed input/output (iput) operation after the filesystem state has been set to disallow such operations. This can happen when a root's delalloc list contains an inode, a reference is grabbed for it, and writeback is triggered, while the unmount sequence is in progress. The fix involves ensuring that the BTRFS FS STATE NO DELAYED IPUT flag is set only after asynchronous reclaim workers have finished and delayed iputs have been processed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Improper Locking

Weakness Enumeration

Related Identifiers

BDU:2025-16077
CVE-2025-38358

Affected Products

Astra Linux
Btrfs
Linux Kernel