Vulnerability in Linux
CVE-2025-71269
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an inline extent due to -ENOSPC, we will attempt to go through the normal COW path, reserve an extent, create an ordered extent, etc. However we were always freeing the reserved qgroup data, which is wrong since we will use data. Fix this by freeing the reserved qgroup data in __cow_file_range_inline() only if we are not doing the fallback (ret is <= 0).
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 94ed938aba557aa798acf496f09afb289b619fcd, 4.4, 0
- Linux Linux_kernel — versions 6.19
References
Frequently asked questions
- What is CVE-2025-71269?
- CVE-2025-71269 is a high-severity vulnerability in Linux. CVSS score: 7.5/10. Published 2026-03-18.
- How severe is CVE-2025-71269?
- High severity. CVSS v3 base score is 7.5 out of 10.