PT-2026-26112 · Linux · Linux Kernel

Published 2025-01-01 · Updated 2026-04-23 · CVE-2025-71269

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where data reservation was incorrectly freed during fallback from inline extent creation due to an -ENOSPC error. This occurred when failing to create an inline extent led to attempting a copy-on-write (COW) operation, reserving an extent, and creating an ordered extent. The reserved qgroup data was incorrectly freed, as it was still needed for data usage. The fix involves ensuring the reserved qgroup data is only freed in cow file range inline() if the fallback is not being performed (when the return value ret is less than or equal to 0).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-832

Related Identifiers

BDU:2026-04243

CVE-2025-71269

ECHO-1404-A334-0B9B

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:1573-1

SUSE-SU-2026:1661-1

SUSE-SU-2026:1668-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21255-1

SUSE-SU-2026:21841-1

Affected Products

Linux Kernel

References · 184

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71269.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-71269 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21255-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71269 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-71269 · Vendor Advisory
• https://git.kernel.org/stable/c/0a1fbbd780f04d1b6cf48dd327c866ba937de1c4 · Patch
• https://git.kernel.org/stable/c/3a9fd45afadec1fbfec72057b9473d509fa8b68c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:21123-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1573-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-71269 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-71269 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71269 · Vendor Advisory
• https://git.kernel.org/stable/c/6de3a371a8b9fd095198b1aa68c22cc10a4c6961 · Patch
• https://git.kernel.org/stable/c/f8da41de0bff9eb1d774a7253da0c9f637c4470a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:21114-1 · Vendor Advisory