Race Condition Vulnerability in Linux Kernel's Btrfs Package
Summary
CVE-2025-22115: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() Block group creation is done in two phases, which results in a slightly unin... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, managing hardware and system resources. Btrfs (B-tree file system) is a modern file system for Linux that offers advanced features such as snapshots, dynamic inode allocation, and integrated volume management. However, it is susceptible to a race condition vulnerability that can lead to critical system errors.
Vulnerability Detail
In the Linux kernel, specifically within the Btrfs file system, a race condition vulnerability exists during the creation of block groups. This issue arises from the two-phase process of block group creation, allowing for concurrent operations that can lead to an invalid state. The vulnerability can cause a refcount underflow, resulting in use-after-free errors, which can compromise system stability and security. The warning messages generated during these incidents indicate a serious flaw in memory management, potentially leading to crashes or data corruption.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the concurrent operations on Btrfs block groups until the patch is applied. This can be done by avoiding simultaneous creation and deletion of block groups, although this is not a permanent solution.
Conclusion
The race condition vulnerability in the Btrfs file system of the Linux kernel poses significant risks to system stability and security. Users are strongly advised to update their systems to the latest patched version to mitigate these risks. Utilizing tools like Vulert can further enhance security by monitoring for vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a race condition in the Btrfs file system that can lead to memory management issues, specifically refcount underflows.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The consequences include system crashes, data corruption, and potential security breaches due to unstable memory management.
Yes, a patch is available in the latest versions of the Linux kernel. Users should update their systems to the patched version.
Vulert is a service that monitors and alerts users about open-source vulnerabilities in software using a manifest file like package-lock.json. It helps ensure your applications remain secure.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
