PT-2026-5994 · Btrfs+3 · Btrfs+3

CVE-2025-71194

·

Published

2025-01-01

·

Updated

2026-08-21

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the btrfs subsystem related to transaction handling. Specifically, the wait current trans() function does not properly consider transaction types when waiting for blocked transactions, potentially leading to a deadlock. This can occur when a worker processing an ordered extent calls start transaction() with TRANS JOIN while another transaction is in the TRANS STATE COMMIT DOING state. The issue arises because the check against the btrfs blocked trans types[] array is missing in wait current trans(). The deadlock involves two transactions and pending ordered extents, where each transaction waits for the other, causing a system stall. The call stacks provided illustrate the sequence of events leading to the deadlock, involving functions like btrfs finish ordered io(), start transaction(), join transaction(), wait current trans(), and btrfs commit transaction().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-77301
BDU:2026-11509
CVE-2025-71194
ECHO-C89D-A66F-3EBC
OESA-2026-2581
OESA-2026-2582
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1078-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20873-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8162-1
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8275-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8297-1
USN-8393-1
USN-8440-1
USN-8499-1
USN-8570-1
USN-8570-2
USN-8594-1
USN-8604-1
USN-8605-1
USN-8669-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu
Btrfs