Critical Vulnerability in Linux Kernel: RAID1 Block Group Write Pointer Mismatch
Summary
DEBIAN-CVE-2025-37827: In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch There was a bug report about a NULL pointer dereference in btrfs_add_free_space_zon... Affects linux versions < 6.12.27-1. Fixed in 6.12.27-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system. The kernel is highly modular, allowing for various functionalities, including file systems, process management, and device drivers. This vulnerability specifically affects the Btrfs file system, which is designed for high performance and reliability, particularly in RAID configurations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Btrfs file system related to RAID1 configurations. The issue arises from a NULL pointer dereference in the __btrfs_add_free_space_zoned() function, triggered by a mismatch in the write pointer offsets of zones in a RAID1 profile. This can lead to system crashes and data loss, as the kernel attempts to access invalid memory addresses. The vulnerability is characterized by an error message indicating a write pointer offset mismatch, which occurs when the system detects inconsistencies between the disks in a RAID set.
How To Fix
Minimum fixed version
6.12.27-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to systems using the Btrfs file system in RAID1 configurations. Users are strongly encouraged to update to the latest patched version to ensure system stability and data integrity. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software stack.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the Btrfs file system, which can lead to system crashes and data loss.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The vulnerability can result in system instability, crashes, and potential data loss due to improper handling of RAID1 configurations.
Yes, a patch is available in version 6.12.27-1 of the Linux kernel. Users should update to this version or later.
While there are no specific workarounds, it is crucial to monitor your system closely and apply the update as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
