CVE-2026-64593

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.10-2-default

Description A NULL pointer dereference occurs in the Btrfs file system when attempting to trim a device that is not writeable. The issue arises during a specific window where a missing device is re-scanned, causing the BTRFS DEV STATE MISSING flag to be removed via the btrfs scan one device() function. However, the device may still lack the BTRFS DEV STATE WRITEABLE flag, and its bdev pointer remains NULL. When the system subsequently calls the btrfs trim fs() function, which leads to btrfs trim free extents() and then btrfs trim free extents throttle(), the call to bdev max discard sectors(device->bdev) triggers a kernel crash because device->bdev is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.