CVE-2025-71183

A flaw was found in the Linux kernel's Btrfs filesystem log replay mechanism. After performing a rename exchange operation on two directories followed by an fsync and power failure, the log tree may contain incomplete inode information. During log replay, Btrfs incorrectly attempts to delete a directory that was never deleted, and if that directory contains a subvolume, the mount fails with a transaction abort because the replay code cannot handle directory entries pointing to root items.

This vulnerability requires a specific sequence: rename exchange of directories (one containing a subvolume), fsync, and power failure. The result is filesystem mount failure after recovery, not data corruption or code execution. Impact is denial of service requiring manual filesystem repair. The complexity of triggering this issue in practice is moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.