In the Linux kernel, the following vulnerability has been resolved:
btrfs: abort transaction on unexpected eb generation at btrfscopyroot()
If we find an unexpected generation for the extent buffer we are cloning at btrfscopyroot(), we just WARN_ON() and don't error out and abort the transaction, meaning we allow to persist metadata with an unexpected generation. Instead of warning only, abort the transaction and return -EUCLEAN.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39800.json"
}[
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148119351195306891939275453631650181362",
"65879809607580156904385119123105683283",
"106960827169093262055396098253930325456",
"56471252411386908625911813382342318743"
]
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-39800-7b40a9f3",
"target": {
"file": "fs/btrfs/ctree.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4734255ef39b416864139dcda96a387fe5f33a6a"
},
{
"digest": {
"length": 1423.0,
"function_hash": "282573048706712890297333502670127012801"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-39800-b989fa64",
"target": {
"function": "btrfs_copy_root",
"file": "fs/btrfs/ctree.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4734255ef39b416864139dcda96a387fe5f33a6a"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39800.json"