Linux Kernel Btrfs Use-After-Free Vulnerability in Inode Handling

Vulnerability

A use-after-free vulnerability has been identified in the Btrfs file system implementation of the Linux kernel. The issue arises when the kernel scans a root during the process of shrinking, accessing the inode's root and file system information after scheduling the inode for a delayed release. This can lead to a use-after-free condition if the cleaner kernel thread releases the inode before it is properly dereferenced, potentially allowing for memory corruption or exploitation.

Impact

Exploitation of this vulnerability can lead to memory corruption, allowing for potential arbitrary code execution or escalation of privileges.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.