CVE-2025-38243

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/07/2025
Last modified:
10/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> btrfs: fix invalid inode pointer dereferences during log replay<br /> <br /> In a few places where we call read_one_inode(), if we get a NULL pointer<br /> we end up jumping into an error path, or fallthrough in case of<br /> __add_inode_ref(), where we then do something like this:<br /> <br /> iput(&amp;inode-&gt;vfs_inode);<br /> <br /> which results in an invalid inode pointer that triggers an invalid memory<br /> access, resulting in a crash.<br /> <br /> Fix this by making sure we don&amp;#39;t do such dereferences.

Impact