PT-2026-5509 · Btrfs+2 · Btrfs+2

Published 2025-01-01 · Updated 2026-05-22 · CVE-2025-71183

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Btrfs file system related to inode handling during rename operations and log replay. Specifically, the issue arises after a rename exchange involving directories and a file, potentially leading to conflicting inodes. This can occur when a power failure interrupts the process, resulting in an incorrect attempt to delete an inode that was not actually deleted before the interruption. In scenarios where the target inode is a directory containing a subvolume, the deletion attempt may fail, causing mount failures and potentially data inconsistencies. The root cause is a failure to detect conflicting inodes during logging, particularly when dealing with directory entries pointing to root items.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71183

ECHO-A4F1-C472-FB32

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:1078-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8278-1

USN-8289-1

USN-8296-1

Affected Products

Btrfs

Linux Kernel

Ubuntu

References · 682

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71183.json · Exploit
• https://ubuntu.com/security/CVE-2026-23020 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31504 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22991 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23256 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71186 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-71183 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8278-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43078 · Vendor Advisory