Btrfs Vulnerability in Linux Kernel Affects Data Integrity

CVE-2025-38260

What is CVE-2025-38260?

A vulnerability in the Btrfs file system of the Linux kernel could lead to system crashes and data integrity issues when the csum tree root is corrupted. This occurs under the 'ro,rescue=ibadroots' mount option, which is intended to allow access to the file system despite errors. In specific scenarios where the csum tree is corrupted, the failure to set the BTRFS_FS_STATE_NO_DATA_CSUMS flag allows for subsequent read operations to incorrectly process checksums, leading to potential system instability and data loss. A fix has been implemented to ensure that error handling is appropriately triggered when the csum tree root cannot be read, re-establishing the necessary integrity checks.

References