What is CVE-2025-22114?

CVE-2025-22114 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-04-16.

How severe is CVE-2025-22114?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2025-22114

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't clobber ret in btrfs_validate_super() Commit 2a9bb78cfd36 ("btrfs: validate system chunk array at btrfs_validate_super()") introduces a call to validate_sys_chunk_array() in btrfs_validate_super(), which clobbers the value of ret set earlier. This has the effect of negating the validity checks done earlier, making it so btrfs could potentially try to mount invalid filesystems.

EPSS: 0.002 (6.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 2a9bb78cfd367fdeff74f15b1e98969912292d9e, 6.14, 0
Linux Linux_kernel

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2025-22114?: CVE-2025-22114 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-04-16.
How severe is CVE-2025-22114?: High severity. CVSS v3 base score is 7.8 out of 10.