CVE-2025-71269
Received Received - Intake
Incorrect Data Reservation Freeing in Linux btrfs Causes Data Corruption

Publication date: 2026-03-18

Last updated on: 2026-04-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an inline extent due to -ENOSPC, we will attempt to go through the normal COW path, reserve an extent, create an ordered extent, etc. However we were always freeing the reserved qgroup data, which is wrong since we will use data. Fix this by freeing the reserved qgroup data in __cow_file_range_inline() only if we are not doing the fallback (ret is <= 0).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-18
Last Modified
2026-04-11
Generated
2026-05-07
AI Q&A
2026-03-18
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel btrfs *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :

Improperly freeing reserved qgroup data in the btrfs filesystem could lead to inconsistencies in data reservation accounting. This might cause unexpected behavior in disk space management, potentially leading to data corruption or loss of data integrity when the fallback path is used after an inline extent creation failure.


How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


Can you explain this vulnerability to me?

This vulnerability exists in the Linux kernel's btrfs filesystem. When the system fails to create an inline extent due to a lack of space (-ENOSPC), it falls back to a normal copy-on-write (COW) path which involves reserving an extent and creating an ordered extent. However, the reserved quota group (qgroup) data was always being freed incorrectly, even though it was still needed. The fix ensures that the reserved qgroup data is only freed if the fallback does not occur, preventing improper freeing of data reservation.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart