PT-2026-5510 · Linux+3 · Linux Kernel+3

Published

2025-01-01

·

Updated

2026-06-16

·

CVE-2025-71184

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to the btrfs filesystem. Specifically, a NULL dereference can occur on the root object when tracing inode eviction. This happens because the root object might be NULL during inode eviction, leading to a potential issue when attempting to fetch its ID for tracing purposes. The fix involves setting the root object ID to 0 when the root is NULL, allowing tracing even in such cases.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

AZL-77277
BDU:2026-04131
CVE-2025-71184
ECHO-8589-8669-4601
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1078-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8393-1
USN-8440-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu
Btrfs