PT-2025-30765 · Linux+7 · Linux Kernel+7
Published
2025-01-01
·
Updated
2026-04-20
·
CVE-2025-38365
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists between file renames and directory logging within the Btrfs filesystem. This can lead to file loss if a crash or power failure occurs during the rename process before it is fully completed. Specifically, the issue arises when a file is being renamed within the same directory, and another task concurrently logs the inode. The log replay process, lacking information about the new file name, may incorrectly delete the file. The issue occurs because the logging of the directory does not fallback to a transaction commit, leading to an inconsistent state in the log tree.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Btrfs
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu