PT-2025-8865 · Linux+7 · Linux Kernel+7
Dmitry Vyukov
+1
·
Published
2025-01-20
·
Updated
2026-04-20
·
CVE-2025-21753
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.13.0-rc7
Description
A use-after-free issue has been identified in the Linux kernel, specifically in the btrfs file system. This occurs when attempting to join an aborted transaction, where the 'aborted' field is read after unlocking fs info->trans lock and without holding any extra reference count on it. This allows a concurrent task that is aborting the transaction to free the transaction before the 'aborted' field is read, resulting in a use-after-free. The issue was reported by syzbot and Dmitry, with stack traces provided from KASAN.
Recommendations
To resolve this issue, update to a version of the Linux kernel that includes the fix for this use-after-free issue. As a temporary workaround, consider restricting access to the btrfs file system until a patch is available.
Exploit
Fix
Use After Free
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu