Memory Access Vulnerability in Linux Kernel Affecting Btrfs
CVE-2025-21679
Currently unrated
Summary
A vulnerability in the Linux kernel's Btrfs file system arises from inadequate error handling within the get_canonical_dev_path() function. When the d_path() function fails and returns an error, it can lead to an invalid memory access during the subsequent strscpy() call, potentially allowing for unexpected behavior or crashes. Proper error handling has been added to mitigate this issue, ensuring the stability and security of the Linux kernel.
Affected Version(s)
Linux 5d261f60b5c82ba1e4b5555252e1c90c43d96015
Linux 7e06de7c83a746e58d4701e013182af133395188
Linux 6.12.5 < 6.12.11
References
Timeline
Vulnerability published
Vulnerability Reserved