Use-after-free Vulnerability in Linux Kernel Affecting Btrfs File System

CVE-2025-21753

Summary

A use-after-free vulnerability exists within the Btrfs file system of the Linux Kernel, where the current transaction's aborted state can be read after the related lock is released. This flaw allows an attacker to exploit the premature freeing of memory, potentially leading to arbitrary code execution or system crashes. It has been addressed by modifying the sequence in which the transaction's aborted state is accessed, ensuring that the necessary locks are held to prevent concurrency issues. Regular updates should be applied to systems running vulnerable versions to mitigate this risk.

References