In the Linux kernel, the following vulnerability has been resolved:
btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
btrfs_prelim_ref() calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is passed as NULL to trace_btrfs_prelim_ref_insert().
Note, trace_btrfs_prelim_ref_insert() is being called with newref as oldref (and oldref as NULL) on purpose in order to print out the values of newref.
To reproduce: echo 1 > /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable
Perform some writeback operations.
Backtrace: BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary) 7ca2cef72d5e9c600f0c7718adb6462de8149622 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014 RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130 Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 <49> 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88 RSP: 0018:ffffce44820077a0 EFLAGS: 00010286 RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010 R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000 R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540 FS: 00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> prelim_ref_insert+0x1c1/0x270 find_parent_nodes+0x12a6/0x1ee0 ? __entry_text_end+0x101f06/0x101f09 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 btrfs_is_data_extent_shared+0x167/0x640 ? fiemap_process_hole+0xd0/0x2c0 extent_fiemap+0xa5c/0xbc0 ? __entry_text_end+0x101f05/0x101f09 btrfs_fiemap+0x7e/0xd0 do_vfs_ioctl+0x425/0x9d0 __x64_sys_ioctl+0x75/0xc0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-develUpgrade kernel-livepatch-5.10.238-231.953Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.141-155.222Upgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-tools-debuginfoUpgrade perfUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-libbpf-static | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-appleUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-allwinner | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-xilinxUpgrade linux-image-gcp-64kUpgrade linux-image-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-awsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-100-lowlatency | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub