01 Record

CVE-2025-38034

btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 8.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-06-18 09:33Z1 YR AGO

Last updated

2026-05-11 21:19Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

324850c4e7e7785334ec30bbc378179db103b8dbfbbe3a903994a2d0ecb9cf64

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux00142756e1f8015d2f8ce96532d156689db7e448 to < 5755b6731655e248c4f1d52a2e1b18795b4a2a3a, 00142756e1f8015d2f8ce96532d156689db7e448 to < a641154cedf9d69730f8af5d0a901fe86e6486bd, 00142756e1f8015d2f8ce96532d156689db7e448 to < a876703894a6dd6e8c04b0635d86e9f7a7c81b79, 00142756e1f8015d2f8ce96532d156689db7e448 to < 0528bba48dce7820d2da72e1a114e1c4552367eb, 00142756e1f8015d2f8ce96532d156689db7e448 to < 7a97f961a568a8f72472dc804af02a0f73152c5f, 00142756e1f8015d2f8ce96532d156689db7e448 to < 7f7c8c03feba5f2454792fab3bb8bd45bd6883f9, 00142756e1f8015d2f8ce96532d156689db7e448 to < 137bfa08c6441f324d00692d1e9d22cfd773329b, 00142756e1f8015d2f8ce96532d156689db7e448 to < bc7e0975093567f51be8e1bdf4aa5900a3cf0b1e, 4.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5755b6731655e248c4f1d52a2e1b18795b4a2a3a
git.kernel.orghttps://git.kernel.org/stable/c/a641154cedf9d69730f8af5d0a901fe86e6486bd
git.kernel.orghttps://git.kernel.org/stable/c/a876703894a6dd6e8c04b0635d86e9f7a7c81b79
git.kernel.orghttps://git.kernel.org/stable/c/0528bba48dce7820d2da72e1a114e1c4552367eb
git.kernel.orghttps://git.kernel.org/stable/c/7a97f961a568a8f72472dc804af02a0f73152c5f
git.kernel.orghttps://git.kernel.org/stable/c/7f7c8c03feba5f2454792fab3bb8bd45bd6883f9
git.kernel.orghttps://git.kernel.org/stable/c/137bfa08c6441f324d00692d1e9d22cfd773329b
git.kernel.orghttps://git.kernel.org/stable/c/bc7e0975093567f51be8e1bdf4aa5900a3cf0b1e
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38034

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38034

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References