In the Linux kernel, the following vulnerability has been resolved:
btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
btrfs_prelim_ref() calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is passed as NULL to trace_btrfs_prelim_ref_insert().
Note, trace_btrfs_prelim_ref_insert() is being called with newref as oldref (and oldref as NULL) on purpose in order to print out the values of newref.
To reproduce: echo 1 > /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable
Perform some writeback operations.
Backtrace: BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary) 7ca2cef72d5e9c600f0c7718adb6462de8149622 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014 RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130 Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 <49> 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88 RSP: 0018:ffffce44820077a0 EFLAGS: 00010286 RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010 R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000 R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540 FS: 00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> prelim_ref_insert+0x1c1/0x270 find_parent_nodes+0x12a6/0x1ee0 ? __entry_text_end+0x101f06/0x101f09 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 btrfs_is_data_extent_shared+0x167/0x640 ? fiemap_process_hole+0xd0/0x2c0 extent_fiemap+0xa5c/0xbc0 ? __entry_text_end+0x101f05/0x101f09 btrfs_fiemap+0x7e/0xd0 do_vfs_ioctl+0x425/0x9d0 __x64_sys_ioctl+0x75/0xc0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade python3-perfUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade bpftoolUpgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel6.12 | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-lgUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-azure-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-generic-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1044-ibm | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub