In the Linux kernel, the following vulnerability has been resolved:
btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
btrfs_prelim_ref() calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is passed as NULL to trace_btrfs_prelim_ref_insert().
Note, trace_btrfs_prelim_ref_insert() is being called with newref as oldref (and oldref as NULL) on purpose in order to print out the values of newref.
To reproduce: echo 1 > /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable
Perform some writeback operations.
Backtrace: BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary) 7ca2cef72d5e9c600f0c7718adb6462de8149622 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014 RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130 Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 <49> 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88 RSP: 0018:ffffce44820077a0 EFLAGS: 00010286 RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010 R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000 R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540 FS: 00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> prelim_ref_insert+0x1c1/0x270 find_parent_nodes+0x12a6/0x1ee0 ? __entry_text_end+0x101f06/0x101f09 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 ? srso_alias_return_thunk+0x5/0xfbef5 btrfs_is_data_extent_shared+0x167/0x640 ? fiemap_process_hole+0xd0/0x2c0 extent_fiemap+0xa5c/0xbc0 ? __entry_text_end+0x101f05/0x101f09 btrfs_fiemap+0x7e/0xd0 do_vfs_ioctl+0x425/0x9d0 __x64_sys_ioctl+0x75/0xc0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.185-126.190Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.31-35.92Upgrade perf6.12Upgrade bpftoolUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade perf6.12-debuginfo | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-symsUpgrade dlm-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fips-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-oem-6.14Upgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-xilinxUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub