CVE-2025-38358

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix race between async reclaim worker and close_ctree()

Syzbot reported an assertion failure due to an attempt to add a delayed

iput after we have set BTRFS_FS_STATE_NO_DELAYED_IPUT in the fs_info

state:

WARNING: CPU: 0 PID: 65 at fs/btrfs/inode.c:3420 btrfs_add_delayed_iput+0x2f8/0x370 fs/btrfs/inode.c:3420

Modules linked in:

CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full)

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025

Workqueue: btrfs-endio-write btrfs_work_helper

RIP: 0010:btrfs_add_delayed_iput+0x2f8/0x370 fs/btrfs/inode.c:3420

Code: 4e ad 5d (...)

RSP: 0018:ffffc9000213f780 EFLAGS: 00010293

RAX: ffffffff83c635b7 RBX: ffff888058920000 RCX: ffff88801c769e00

RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000

RBP: 0000000000000001 R08: ffff888058921b67 R09: 1ffff1100b12436c

R

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References