In the Linux kernel, the following vulnerability has been resolved:
btrfs: do not BUG_ON() when freeing tree block after error
When freeing a tree block, at btrfs_free_tree_block(), if we fail to create a delayed reference we don't deal with the error and just do a BUG_ON(). The error most likely to happen is -ENOMEM, and we have a comment mentioning that only -ENOMEM can happen, but that is not true, because in case qgroups are enabled any error returned from btrfs_qgroup_trace_extent_post() (can be -EUCLEAN or anything returned from btrfs_search_slot() for example) can be propagated back to btrfs_free_tree_block().
So stop doing a BUG_ON() and return the error to the callers and make them abort the transaction to prevent leaking space. Syzbot was triggering this, likely due to memory allocation failure injection.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Sep 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kselftests-kmp-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04 | Dec 13, 2024 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub