In the Linux kernel, the following vulnerability has been resolved:
btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
btrfs_prelim_ref() calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is passed as NULL to trace_btrfs_prelim_ref_insert().
Note, trace_btrfs_prelim_ref_insert() is being called with newref as oldref (and oldref as NULL) on purpose in order to print out the values of newref.
To reproduce: echo 1 > /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable
Perform some writeback operations.
Backtrace: BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary) 7ca2cef72d5e9c600f0c7718adb6462de8149622 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014 RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130 Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 <49> 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88 RSP: 0018:ffffce44820077a0 EFLAGS: 00010286 RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010 R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000 R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540 FS: 00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> prelim_ref_insert+0x1c1/0x270 find_parent_nodes+0x12a6/0x1ee0 ? __entry_text_end+0x101f06/0x101f09 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 btrfs_is_data_extent_shared+0x167/0x640 ? fiemap_process_hole+0xd0/0x2c0 extent_fiemap+0xa5c/0xbc0 ? __entry_text_end+0x101f05/0x101f09 btrfs_fiemap+0x7e/0xd0 do_vfs_ioctl+0x425/0x9d0 __x64_sys_ioctl+0x75/0xc0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.185-126.190Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade python3-perf6.12Upgrade python3-perf | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-develUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dlm-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-xilinxUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-152-generic-64k | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub