PT-2025-52894 · Linux+4 · Linux Kernel+4
Published
2025-12-24
·
Updated
2026-05-22
·
CVE-2025-68358
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the btrfs file system related to race conditions during bitfield writes within the
btrfs clear space info full() function. The issue stems from the use of non-atomic read-modify-write sequences on bitfields, which can lead to data corruption when multiple threads access and modify these fields concurrently, even when protected by locks. Specifically, the full, chunk alloc, and flush bitfields within the btrfs space info structure are susceptible to this issue. This can result in the flush flag being incorrectly set, leading to indefinite blocking of future allocations. The issue occurs when a transaction completes deleting a block group and calls btrfs clear space info full() simultaneously with the data reclaim ticket infrastructure running do async reclaim data space(). The assembly code demonstrates that read-modify-write operations are used to manipulate the bitfields.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu
Btrfs