CVE-2025-71184

A NULL pointer dereference vulnerability was found in the Linux kernel's Btrfs filesystem. When evicting an inode in btrfs_evict_inode(), the tracing setup code attempts to fetch the root's ID before checking if the root pointer is NULL. This can cause a kernel crash when the inode's root is NULL during eviction, which can occur in certain error recovery paths.

This flaw occurs during inode eviction when tracing is enabled and the inode's root pointer is unexpectedly NULL. The crash happens before the existing NULL check in btrfs_evict_inode() has a chance to execute. Triggering requires Btrfs filesystem usage with tracing enabled and specific error conditions that leave an inode without a valid root reference.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.