PT-2025-30758

CVE-2025-38358

·

Published

2025-06-04

·

Updated

2025-07-26

Description by

CVSS 3.1
4.7
Medium
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to a race condition between the asynchronous reclaim worker and the close ctree() function within the Btrfs filesystem. This issue arises from an incorrect order of operations during filesystem unmounting and asynchronous reclamation, potentially leading to an assertion failure. Specifically, the race occurs when the asynchronous metadata reclaim worker attempts to add a delayed input/output (iput) operation after the filesystem state has been set to disallow such operations. This can happen when a root's delalloc list contains an inode, a reference is grabbed for it, and writeback is triggered, while the unmount sequence is in progress. The fix involves ensuring that the BTRFS FS STATE NO DELAYED IPUT flag is set only after asynchronous reclaim workers have finished and delayed iputs have been processed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾