CVE-2025-21679: btrfs: add the missing error handling inside get_canonical_dev_path
In the Linux kernel, the following vulnerability has been resolved:
btrfs: add the missing error handling inside getcanonicaldevpath
Inside function getcanonicaldevpath(), we call dpath() to get the final device path.
But dpath() can return error, and in that case the next strscpy() call will trigger an invalid memory access.
Add back the missing error handling for dpath().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21679?
The severity of CVE-2025-21679 is classified as moderate based on its impact on system functions.
How do I fix CVE-2025-21679?
To fix CVE-2025-21679, ensure that you have the latest patches or updates applied to the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2025-21679?
CVE-2025-21679 affects multiple versions of the Linux kernel that are prior to the patch release.
What does CVE-2025-21679 impact in the Linux kernel?
CVE-2025-21679 primarily impacts the btrfs file system functionality related to device path resolution.
Is CVE-2025-21679 exploitable in remote attacks?
CVE-2025-21679 is not specifically noted for being exploitable in remote attacks but may allow local code execution under certain conditions.