Log in Start free

Vulnerability · Published Mar 18, 2026 · Assigned by Linux

CVE-2025-71269btrfs: do not free data reservation in fallback from inline due to -ENOSPC

High 7.5

In plain English

A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 85.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an inline extent due to -ENOSPC, we will attempt to go through the normal COW path, reserve an extent, create an ordered extent, etc. However we were always freeing the reserved qgroup data, which is wrong since we will use data. Fix this by freeing the reserved qgroup data in __cow_file_range_inline() only if we are not doing the fallback (ret is <= 0).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.170-1DEBIAN-CVE-2025-71269
Debian:13linux6.12.85-1DEBIAN-CVE-2025-71269
Debian:14linux6.18.10-1DEBIAN-CVE-2025-71269
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux6.8.0-136.136UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux6.8.0-136.136USN-8567-1
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-aws6.8.0-1061.64USN-8595-2
Ubuntu:24.04:LTSlinux-aws6.8.0-1061.64UBUNTU-CVE-2025-71269
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1061.64~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1061.64~22.04.1USN-8595-3
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71USN-8606-1
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1USN-8606-1
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69USN-8607-1
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2025-71269
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1USN-8609-1
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gcp6.8.0-1064.72USN-8567-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1064.72UBUNTU-CVE-2025-71269
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1064.72~22.04.1USN-8567-1
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1064.72~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gke6.8.0-1059.67USN-8567-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1059.67UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1046.50UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1046.50USN-8567-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1USN-8619-1
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-ibm6.8.0-1061.62UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-ibm6.8.0-1061.62USN-8574-3
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1061.62~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1061.62~22.04.1USN-8574-3
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-136.136.2UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-136.136.2USN-8574-2
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-136.136.2~22.04.1USN-8574-2
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-136.136.2~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1059.62UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1059.62USN-8596-1
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1059.62~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1059.62~22.04.1USN-8596-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1059.62.1USN-8596-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1059.62.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1030.31USN-8574-3
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1030.31UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oracle6.8.0-1058.61UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oracle6.8.0-1058.61USN-8574-2
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1058.61~22.04.1USN-8595-1
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1058.61~22.04.1UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-raspi6.8.0-1061.65UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-raspi6.8.0-1061.65USN-8665-1
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71269
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-136.136~22.04.3UBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-71269
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1033.34UBUNTU-CVE-2025-71269
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1033.34USN-8574-3
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-71269

Affected products (as reported)

VendorProductVersions
Linux Linux 94ed938aba557aa798acf496f09afb289b619fcd – before 3edd1f6c7c520536b62b2904807033597554dbac94ed938aba557aa798acf496f09afb289b619fcd – before 3a9fd45afadec1fbfec72057b9473d509fa8b68c94ed938aba557aa798acf496f09afb289b619fcd – before 0a1fbbd780f04d1b6cf48dd327c866ba937de1c494ed938aba557aa798acf496f09afb289b619fcd – before 6de3a371a8b9fd095198b1aa68c22cc10a4c696194ed938aba557aa798acf496f09afb289b619fcd – before f8da41de0bff9eb1d774a7253da0c9f637c4470a
Linux Linux 4.4

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References