CVE-2025-22114

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22114
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't clobber ret in btrfs_validate_super() Commit 2a9bb78cfd36 ("btrfs: validate system chunk array at btrfs_validate_super()") introduces a call to validate_sys_chunk_array() in btrfs_validate_super(), which clobbers the value of ret set earlier. This has the effect of negating the validity checks done earlier, making it so btrfs could potentially try to mount invalid filesystems.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/9db9c7dd5b4e1d3205137a094805980082c37716 Patch
https://git.kernel.org/stable/c/ef6800a2015e706e9852a5ec15263fec9990d012 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Nov 2025, 18:37

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: no modificar la matriz de fragmentos del sistema en btrfs_validate_super(). El commit 2a9bb78cfd36 ("btrfs: validar la matriz de fragmentos del sistema en btrfs_validate_super()") introduce una llamada a validate_sys_chunk_array() en btrfs_validate_super(), que modifica el valor de ret establecido previamente. Esto invalida las comprobaciones de validez realizadas previamente, lo que permite que btrfs intente montar sistemas de archivos no válidos.
References () https://git.kernel.org/stable/c/9db9c7dd5b4e1d3205137a094805980082c37716 - () https://git.kernel.org/stable/c/9db9c7dd5b4e1d3205137a094805980082c37716 - Patch
References () https://git.kernel.org/stable/c/ef6800a2015e706e9852a5ec15263fec9990d012 - () https://git.kernel.org/stable/c/ef6800a2015e706e9852a5ec15263fec9990d012 - Patch
CWE NVD-CWE-noinfo

16 Apr 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:16

Updated : 2025-11-03 18:37

NVD link : CVE-2025-22114

Mitre link : CVE-2025-22114

CVE.ORG link : CVE-2025-22114

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo