CVE-2025-71269 btrfs: do not free data reservation in fallback from inline due to -ENOSPC

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an inline extent due to -ENOSPC, we will attempt to go through the normal COW path, reserve an extent, create an ordered extent, etc...

CVE-2025-71269

CVE-2025-71269: The Linux kernel Btrfs fallback path for inline extents could free reserved qgroup data incorrectly when ENOSPC occurred. The fix ensures that reserved qgroup data is freed in __cow_file_range_inline() only if the fallback path is not taken (ret > 0). This change prevents freei...

CVE-2025-71268

In CVE-2025-71268, the Linux kernel btrfs code leaked reserved qgroup data on certain error paths during inline extent insertion. The root cause is __cow_file_range_inline() returning early without freeing the reserved qgroup data. The provided remediation is to call btrfs_qgroup_free_data() in t...

CVE-2025-71268 btrfs: fix reservation leak in some error paths when inserting inline extent

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to allocate a path or join a transaction, we return from cowfilerangeinline without freeing the reserved qgroup data, resulting in a leak. Fi...

Linux Distros Unpatched Vulnerability : CVE-2025-71268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to allocate a path or join a transaction, we return from...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004865)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004865 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the testnosharedqgroup and...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46733)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46733 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve leaks in...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a memory leak in btrfsaddqgrouprelation, where the qgrouplist structure remains unleased after it is allocated by kzalloc. When btrfsaddqgrouprelation is called with invalid qgroup levels src = dst, the function...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992890 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the testnosharedqgroup and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992286 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the testnosharedqgroup and...

Linux Distros Unpatched Vulnerability : CVE-2023-54158

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create...

EUVD-2023-60287

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...

CVE-2023-54158

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...

CVE-2023-54158 btrfs: don't free qgroup space unless specified

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...

CVE-2025-68359 btrfs: fix double free of qgroup record after failure to add delayed ref head

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree scenario when calling adddelayedrefhead. This could happen if the record was reported...

CVE-2025-68359 btrfs: fix double free of qgroup record after failure to add delayed ref head

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree scenario when calling adddelayedrefhead. This could happen if the record was reported...

CVE-2025-68359

CVE-2025-68359 concerns the Linux kernel/btrfs. The vulnerability arises from a double free of a qrecord when add_delayed_ref_head() returns an error after btrfs_qgroup_trace_extent_nolock() reports the record as existing. The fix reassigns ownership of the qrecord away from add_delayed_ref_head(...

PT-2025-52895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to double freeing of a qgroup record after a failure to add a delayed reference head. Specifically, the issue arises from a double kfree scenario...

The vulnerability in the fs/btrfs/qgroup.c component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

SUSE CVE-2025-40209

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgrouplist in btrfsaddqgrouprelation When btrfsaddqgrouprelation is called with invalid qgroup levels src = dst, the function returns -EINVAL directly without freeing the preallocated qgrouplist structur...