PT-2025-8864 · Linux+2 · Linux Kernel+2

Published 2025-01-14 · Updated 2026-04-20 · CVE-2025-21752

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc1+ #1464

Description A issue has been identified in the Linux kernel where the use of btrfs set item key safe() to modify keys in the RAID stripe-tree can lead to corruption of the tree. This corruption is caught by checks in btrfs set item key safe(), resulting in a kernel bug. The root cause of the tree order corruption is not clear, but using btrfs duplicate item() to copy the item and then adjusting both the key and the per-device physical addresses is a safe way to counter this problem.

Recommendations For Linux kernel version 6.13.0-rc1+ #1464 and earlier, consider using btrfs duplicate item() to copy the item and then adjusting both the key and the per-device physical addresses as a safe way to counter this problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-19

CWE-787

Related Identifiers

BDU:2026-02380

CVE-2025-21752

Affected Products

Astra Linux

Debian

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21752.json · Exploit
• https://git.kernel.org/stable/c/dc14ba10781bd2629835696b7cc1febf914768e9 · Patch
• https://git.kernel.org/stable/c/1c25eff52ee5a02a2c4be659a44ae972d9989742 · Patch
• https://security-tracker.debian.org/tracker/CVE-2025-21752 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-21752 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-21752 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21752 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-21752 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21752 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-21752 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21752 · Security Note
• https://bdu.fstec.ru/vul/2026-02380 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21752 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-21752 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-21752 · Security Note