CVE-2025-38243

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38243
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call read_one_inode(), if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of __add_inode_ref(), where we then do something like this: iput(&inode->vfs_inode); which results in an invalid inode pointer that triggers an invalid memory access, resulting in a crash. Fix this by making sure we don't do such dereferences.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2dcf838cf5c2f0f4501edaa1680fcad03618d760 Patch
https://git.kernel.org/stable/c/401d098f92ea69d8a75f8b845daf343e511681ba Patch
https://git.kernel.org/stable/c/ba8386d662cc51cc5382688bbf7a152b0b0b27cf Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*
History

19 Nov 2025, 15:37

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2dcf838cf5c2f0f4501edaa1680fcad03618d760 - () https://git.kernel.org/stable/c/2dcf838cf5c2f0f4501edaa1680fcad03618d760 - Patch
References () https://git.kernel.org/stable/c/401d098f92ea69d8a75f8b845daf343e511681ba - () https://git.kernel.org/stable/c/401d098f92ea69d8a75f8b845daf343e511681ba - Patch
References () https://git.kernel.org/stable/c/ba8386d662cc51cc5382688bbf7a152b0b0b27cf - () https://git.kernel.org/stable/c/ba8386d662cc51cc5382688bbf7a152b0b0b27cf - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
First Time Linux
Linux linux Kernel

10 Jul 2025, 15:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/401d098f92ea69d8a75f8b845daf343e511681ba -

10 Jul 2025, 13:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: corrección de desreferencias de punteros inodos no válidos durante la reproducción de registros. En algunos casos, al ejecutar read_one_inode(), si se obtiene un puntero nulo, se accede a una ruta de error o a una ruta de paso en el caso de __add_inode_ref(). En este caso, se realiza algo como: iput(&inode->vfs_inode);, lo que genera un puntero inodo no válido que desencadena un acceso no válido a memoria y provoca un fallo. Para solucionar esto, es necesario asegurarse de no realizar dichas desreferencias.

09 Jul 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-09 11:15

Updated : 2025-11-19 15:37

NVD link : CVE-2025-38243

Mitre link : CVE-2025-38243

CVE.ORG link : CVE-2025-38243

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference