CVE-2025-71184 Details
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL dereference on root when tracing inode eviction When evicting an inode the first thing we do is to setup tracing for it, which implies fetching the root's id. But in btrfs_evict_inode() the root might be NULL, as implied in the next check that we do in btrfs_evict_inode(). Hence, we either should set the ->root_objectid to 0 in case the root is NULL, or we move tracing setup after checking that the root is not NULL. Setting the rootid to 0 at least gives us the possibility to trace this call even in the case when the root is NULL, so that's the solution taken here.
A vulnerability in the Linux kernel's Btrfs file system can lead to a NULL dereference when tracing inode eviction. This issue occurs because the root ID may be NULL during the eviction process, causing a crash. The vulnerability affects the stable versions of the Linux kernel.
Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/582ba48e4a4c06fef6bdcf4e57b7b9af660bbd0c | kernel.org | Patch |
| https://git.kernel.org/stable/c/64d8abd8c5305795a2b35fc96039d99d34f5e762 | kernel.org | Patch |
| https://git.kernel.org/stable/c/99e057f3d3ef24b99a7b1d84e01dd1bd890098da | kernel.org | Patch |
| https://git.kernel.org/stable/c/f157dd661339fc6f5f2b574fe2429c43bd309534 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.39.1, < 6.6.130 >= 6.7, < 6.12.66 >= 6.13, < 6.18.6 2.6.39 - 6.19 rc1 6.19 rc2 6.19 rc3 6.19 rc4 6.19 rc5 6.19 rc6 6.19 rc7 6.19 rc8 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Mar 25, 2026 | Initial Analysis | [email protected] |
| Mar 25, 2026 | CVE Modified | kernel.org |
| Jan 31, 2026 | New CVE Received | kernel.org |