CVE-2025-71194

Description

A deadlock vulnerability was found in the Linux kernel's Btrfs filesystem. The wait_current_trans() function unconditionally waits for blocked transactions without checking the btrfs_blocked_trans_types[] array to determine if the specific transaction type should actually wait. This causes TRANS_JOIN operations to incorrectly wait for TRANS_STATE_COMMIT_START, creating a circular dependency where Transaction B waits for an ordered extent that is itself waiting for Transaction B.

Statement

This deadlock affects Btrfs filesystems under specific workload patterns involving concurrent ordered extent processing and transaction commits, such as during fdatasync operations. When triggered, the system hangs with processes stuck in uninterruptible sleep. The issue requires local filesystem access and specific timing conditions to manifest.

Common Vulnerability Scoring System (CVSS) Score Details

Info alert:Important note

CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).

The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 Score Breakdown

Red HatNVDcve.org
Base Score5.5N/AN/A
Attack VectorLocalN/AN/A
Attack ComplexityLowN/AN/A
Privileges RequiredLowN/AN/A
User InteractionNoneN/AN/A
ScopeUnchangedN/AN/A
ConfidentialityNoneN/AN/A
Integrity ImpactNoneN/AN/A
Availability ImpactHighN/AN/A

Vector

Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Understanding the Weakness (CWE)

CWE-821

Integrity,Confidentiality,Other

Technical Impact: Modify Application Data; Read Application Data; Alter Execution Logic

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.