CVE-2025-71269CWE-416

CVE-2025-71269

High · published March 18, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: do not free data reservation in fallback from inline due to -ENOSPC

If we fail to create an inline extent due to -ENOSPC, we will attempt to

go through the normal COW path, reserve an extent, create an ordered

extent, etc. However we were always freeing the reserved qgroup data,

which is wrong since we will use data. Fix this by freeing the reserved

qgroup data in __cow_file_range_inline() only if we are not doing the

fallback (ret is <= 0).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Weakness
CWE-416 · Use After Free
Published
2026-03-18T22:16Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.4, < 6.1.1686.1.168
linux/linux_kernel≥ 6.2, < 6.6.1346.6.134
linux/linux_kernel≥ 6.7, < 6.12.816.12.81
linux/linux_kernel≥ 6.13, < 6.18.106.18.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/0a1fbbd780f04d1b6cf48dd327c866ba937de1c4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3a9fd45afadec1fbfec72057b9473d509fa8b68c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3edd1f6c7c520536b62b2904807033597554dbac · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6de3a371a8b9fd095198b1aa68c22cc10a4c6961 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f8da41de0bff9eb1d774a7253da0c9f637c4470a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 MAR 17:40Z
    btrfs: do not free data reservation in fallback from inline due to -ENOSPC
    cvelistv5