CVE Explorer

CVE-2025-71184

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL dereference on root when tracing inode eviction When evicting an inode the first thing we do is to setup tracing for it, which implies fetching the root's id. But in btrfs_evict_inode() the root might be NULL, as implied in the next check that we do in btrfs_evict_inode(). Hence, we either should set the ->root_objectid to 0 in case the root is NULL, or we move tracing setup after checking that the root is not

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:04bb661a7b0f0959f4c9738febe8a6a0e101f8152980f7993a0c2f7ab39a26bc

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["include/trace/events/btrfs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.39"},{"lessThan":"2.6.39","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.66","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.6","versionType":"semver"},{…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/trace/events/btrfs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"64d8abd8c5305795a2b35fc96039d99d34f5e762","status":"affected","version":"1abe9b8a138c9988ba8f7bfded6453649a31541f","versionType":"git"},{"lessThan":"582ba48e4a4c06fef6bdcf4e57b7b9af660bbd0c","status":"affected","version":"1abe9b8a138c9988ba8f7bfded6453649a31541f","versionType":"git"},{"lessThan":"99e057f3d3ef24b99a7b1d84e01dd1bd890098da","status":"affected","version":"1abe9b8a138c9988b…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/affected/0

Source references

4 source assertions

{"url":"https://git.kernel.org/stable/c/582ba48e4a4c06fef6bdcf4e57b7b9af660bbd0c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/64d8abd8c5305795a2b35fc96039d99d34f5e762"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/99e057f3d3ef24b99a7b1d84e01dd1bd890098da"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/f157dd661339fc6f5f2b574fe2429c43bd309534"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed438dd3d4357a97ee41375dd4bdcea92f98f540bf62556de046ca4079103615 · sha256:7c4fba796d1355fe… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer