CVE-2025-38269

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: In the Linux kernel, a flaw exists within the btrfs subsystem, specifically in the btrfs convert extent bit() function. If the insert state() function fails, it returns an error pointer. Subsequently, extent io tree panic() is called, which triggers a BUG() call. However, if CONFIG BUG is disabled—an uncommon configuration—execution continues to cache state(), leading to a dereference of the error pointer and resulting in an invalid memory access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.