In the Linux kernel, the following vulnerability has been resolved:
btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
btrfs_prelim_ref() calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is passed as NULL to trace_btrfs_prelim_ref_insert().
Note, trace_btrfs_prelim_ref_insert() is being called with newref as oldref (and oldref as NULL) on purpose in order to print out the values of newref.
To reproduce: echo 1 > /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable
Perform some writeback operations.
Backtrace: BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary) 7ca2cef72d5e9c600f0c7718adb6462de8149622 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014 RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130 Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 <49> 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88 RSP: 0018:ffffce44820077a0 EFLAGS: 00010286 RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010 R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000 R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540 FS: 00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> prelim_ref_insert+0x1c1/0x270 find_parent_nodes+0x12a6/0x1ee0 ? __entry_text_end+0x101f06/0x101f09 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 btrfs_is_data_extent_shared+0x167/0x640 ? fiemap_process_hole+0xd0/0x2c0 extent_fiemap+0xa5c/0xbc0 ? __entry_text_end+0x101f05/0x101f09 btrfs_fiemap+0x7e/0xd0 do_vfs_ioctl+0x425/0x9d0 __x64_sys_ioctl+0x75/0xc0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade perf-debuginfo | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-nvidia-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-azure-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-ibm-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub