CVE-2025-38243
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/07/2025
Last modified:
10/07/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
btrfs: fix invalid inode pointer dereferences during log replay<br />
<br />
In a few places where we call read_one_inode(), if we get a NULL pointer<br />
we end up jumping into an error path, or fallthrough in case of<br />
__add_inode_ref(), where we then do something like this:<br />
<br />
iput(&inode->vfs_inode);<br />
<br />
which results in an invalid inode pointer that triggers an invalid memory<br />
access, resulting in a crash.<br />
<br />
Fix this by making sure we don&#39;t do such dereferences.