Linux Kernel Btrfs Inline Backreference Debug Information Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Btrfs file system has been addressed, which involved the output of additional debug information when an inline backreference could not be found. This issue was highlighted by Syzbot, which reported warnings triggered during the lookup of inline extent backreferences. The problem arises when attempting to insert a new inline backreference, as the backreference is expected to already exist. The vulnerability has been resolved by enhancing the debug output to include all relevant parameters and the extent tree leaf, facilitating better diagnosis of the issue.

Impact

The vulnerability could lead to a denial of service by causing the system to output excessive debug information, potentially overwhelming log management systems or obscuring other important log entries.

Reproduction

The vulnerability can be reproduced by using a tool like Syzkaller, which can trigger the warning about missing inline backreferences during the fuzzing process. However, this reproducer may not consistently replicate the issue in all environments.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.

Added: Oct 7, 2025, 5:04 PM
Updated: Oct 7, 2025, 5:04 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
0.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.