CVE - CVE-2025-38269

CVE-ID
CVE-2025-38269	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If insert_state() state failed it returns an error pointer and we call extent_io_tree_panic() which will trigger a BUG() call. However if CONFIG_BUG is disabled, which is an uncommon and exotic scenario, then we fallthrough and call cache_state() which will dereference the error pointer, resulting in an invalid memory access. So jump to the 'out' label after calling extent_io_tree_panic(), it also makes the code more clear besides dealing with the exotic scenario where CONFIG_BUG is disabled.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3bf179e36da917c5d9bec71c714573ed1649b7c1 URL:https://git.kernel.org/stable/c/3bf179e36da917c5d9bec71c714573ed1649b7c1 MISC:https://git.kernel.org/stable/c/58c50f45e1821a04d61b62514f9bd34afe67c622 URL:https://git.kernel.org/stable/c/58c50f45e1821a04d61b62514f9bd34afe67c622 MISC:https://git.kernel.org/stable/c/8d9d32088e304e2bc444a3087cab0bbbd9951866 URL:https://git.kernel.org/stable/c/8d9d32088e304e2bc444a3087cab0bbbd9951866
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)