CVE-2025-39884 — Improper Locking in Linux
Severity
4.7MEDIUMNVD
EPSS
0.0%
top 98.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 23
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix subvolume deletion lockup caused by inodes xarray race
There is a race condition between inode eviction and inode caching that
can cause a live struct btrfs_inode to be missing from the root->inodes
xarray. Specifically, there is a window during evict() between the inode
being unhashed and deleted from the xarray. If btrfs_iget() is called
for the same inode in that window, it will be recreated and inserted
into the…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages12 packages
▶CVEListV5linux/linux310b2f5d5a9451b708ab1d3385c3b0998084904c — 9ba898c9fcbe6ebb88bcd4df8aab0f90090d202e+3
Patches
🔴Vulnerability Details
2OSV▶
CVE-2025-39884: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by inodes xarray race There is a race↗2025-09-23
GHSA▶
GHSA-8f6j-f2h2-wfrj: In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix subvolume deletion lockup caused by inodes xarray race
There is a rac↗2025-09-23
📋Vendor Advisories
3Debian▶
CVE-2025-39884: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ...↗2025
Microsoft
▶