CVE-2025-21753

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc7

Description A use-after-free issue has been identified in the Linux kernel, specifically in the btrfs file system. This occurs when attempting to join an aborted transaction, where the 'aborted' field is read after unlocking fs info->trans lock and without holding any extra reference count on it. This allows a concurrent task that is aborting the transaction to free the transaction before the 'aborted' field is read, resulting in a use-after-free. The issue was reported by syzbot and Dmitry, with stack traces provided from KASAN.

Recommendations To resolve this issue, update to a version of the Linux kernel that includes the fix for this use-after-free issue. As a temporary workaround, consider restricting access to the btrfs file system until a patch is available.