Critical NULL Pointer Dereference Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2025-38059: In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid csum tree [BUG] When trying read-only scrub on a btrfs with rescue=idatacsums mount option, it will cr... Affects linux versions < 6.12.32-1. Fixed in 6.12.32-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various platforms, including servers, desktops, and embedded systems. This vulnerability specifically affects the btrfs filesystem, which is designed for high-performance and flexible storage management. The issue arises when using the 'rescue=idatacsums' mount option, leading to potential system crashes during read-only scrub operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the btrfs filesystem that can lead to a NULL pointer dereference. This occurs when a read-only scrub operation is performed on a btrfs filesystem mounted with the 'rescue=idatacsums' option. The scrub process attempts to access a checksum tree that has not been loaded, resulting in a crash with a kernel NULL pointer dereference. The bug can cause system instability and data integrity issues, as it bypasses checksum verification, potentially leading to undetected data corruption.
How To Fix
Minimum fixed version
6.12.32-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the 'rescue=idatacsums' mount option when working with btrfs filesystems. This will prevent the NULL pointer dereference issue from occurring during scrub operations.
Conclusion
The identified NULL pointer dereference vulnerability in the Linux kernel's btrfs filesystem poses significant risks to system stability and data integrity. Users are strongly advised to update to the patched version of the kernel to mitigate these risks. Meanwhile, avoiding the problematic mount option can serve as a temporary workaround.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes and data integrity issues due to unchecked checksum verification.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If an immediate update is not possible, consider avoiding the use of the 'rescue=idatacsums' mount option as a temporary measure.
Yes, this vulnerability affects specific versions of the Linux kernel prior to the patch version 6.12.32-1.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38059.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
