Race Condition Vulnerability in Linux Kernel Btrfs Quota Management

CVE-2025-39759

What is CVE-2025-39759?

A vulnerability in the Linux kernel's Btrfs file system arises from a race condition between tasks disabling quotas and others running the quota rescan ioctl. This can lead to a use-after-free scenario where quota group records are freed while other tasks attempt to access them, causing potential instability and data corruption. The issue is mitigated by properly locking shared resources during configuration adjustments, ensuring that quota rescan operations are not initiated when quotas are already disabled.

References