Linux Kernel Btrfs Free Space Management Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Btrfs file system has been addressed. The issue involved the use of 'BUG_ON()' statements in the 'add_new_free_space()' function, which were intended to handle rare errors related to memory allocation failures. These 'BUG_ON()' statements were unnecessary, as the function could simply return errors to the caller, which is already equipped to handle such situations. The vulnerability has been resolved by modifying 'add_new_free_space()' to return errors instead of using 'BUG_ON()', while also providing the total amount of added free space to an optional pointer argument.

Impact

The removal of the 'BUG_ON()' statements prevents the function from abruptly terminating in case of an error, allowing for better error handling and potentially improving the stability of applications that rely on this function.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Dec 30, 2025, 4:10 PM
Updated: Dec 30, 2025, 4:10 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
7.7
relevance
1.8
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.