CVE-2025-39800
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.1.153 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's btrfs filesystem occurs because when an unexpected generation number is found for the extent buffer during the btrfs_copy_root() operation, the system only issues a warning (WARN_ON()) instead of aborting the transaction. This behavior allows metadata with an unexpected generation to be persisted, which is incorrect. The fix changes this so that the transaction is aborted and an error (-EUCLEAN) is returned when such an unexpected generation is detected.
How can this vulnerability impact me? :
The vulnerability can lead to the persistence of incorrect or corrupted metadata in the btrfs filesystem because transactions are not properly aborted when unexpected extent buffer generations are encountered. This could potentially cause filesystem inconsistencies or data integrity issues.