Linux Kernel Btrfs Warning Resolution Vulnerability

Vulnerability

A warning was introduced in the Btrfs file system of the Linux kernel when a transaction is aborted with quota groups enabled. This warning occurs during the final phase of the transaction, indicating that the 'dirty_extent_root' is not empty, which could lead to potential issues. The warning is triggered because the 'btrfs_qgroup_destroy_extent_records' function, called during the transaction abort process, frees the entries from the 'dirty_extent_root' rbtree but does not clear the rbtree itself. As a result, the rbtree remains pointed to the now-freed nodes, causing the warning. The issue has been fixed by setting the rbtree's root to NULL, effectively clearing it and preventing the warning from occurring.

Impact

The vulnerability could lead to a persistent warning being generated, indicating that the 'dirty_extent_root' is not properly managed during transaction aborts, which could obscure other potential issues or bugs.

Reproduction

To reproduce this vulnerability, initiate a transaction in Btrfs with quota groups enabled. Then, force an abort of the transaction. After the abort, a warning will be triggered when the transaction is finalized, indicating that the 'dirty_extent_root' is not empty. This warning can be observed in the system logs.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the kernel where this issue has been fixed.

Added: Dec 9, 2025, 9:06 PM
Updated: Dec 9, 2025, 9:06 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
1.4
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.