CVE-2025-21752

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents

Don't use btrfs_set_item_key_safe() to modify the keys in the RAID

stripe-tree, as this can lead to corruption of the tree, which is caught

by the checks in btrfs_set_item_key_safe():

BTRFS info (device nvme1n1): leaf 49168384 gen 15 total ptrs 194 free space 8329 owner 12

BTRFS info (device nvme1n1): refs 2 lock_owner 1030 current 1030

[ snip ]

item 105 key (354549760 230 20480) itemoff 14587 itemsize 16

stride 0 devid 5 physical 67502080

item 106 key (354631680 230 4096) itemoff 14571 itemsize 16

stride 0 devid 1 physical 88559616

item 107 key (354631680 230 32768) itemoff 14555 itemsize 16

stride 0 devid 1 physical 88555520

item 108 key (354717696 230 28672) itemoff 14539 itemsize 16

stride 0 devid 2 physical 67604480

[ snip ]

BTRFS critical (device nvme1n1): slot

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References