CVE-2025-68778 is a vulnerability in the Linux kernel's Btrfs filesystem that can lead to a mount failure after a power loss during specific directory and file operations. This occurs because the log replay mechanism can incorrectly assign multiple hard links to a directory, which Btrfs does not permit. The vulnerability affects the integrity of the Btrfs filesystem, potentially causing data unavailability. The severity is moderate, with a FAUCET Risk Score of 39/100. The attack vector involves a specific sequence of filesystem operations followed by an unexpected power failure, making direct exploitation difficult. The impact is primarily denial of service due to filesystem corruption and unmountability. There is no evidence of active exploitation, and no exploit code is publicly available on platforms like Metasploit or ExploitDB. However, the vulnerability has garnered significant community attention with 11 mentions in discussions and one media article, indicating awareness and concern within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 4.8CNA affecteddefault affected | |
| Linux | Linux | >= 44f714dae50a2e795d3268a6831762aa6fa54f55, < 266273eaf4d99475f1ae57f687b3e42bc71ec6f0, >= 44f714dae50a2e795d3268a6831762aa6fa54f55, < 7359e1d39c78816ecbdb0cb4e93975794ce53973, >= 44f714dae50a2e795d3268a6831762aa6fa54f55, < a35788ddf8df65837897ecbb0ddb2896b863159e, >= 44f714dae50a2e795d3268a6831762aa6fa54f55, < d478f50727c3ee46d0359f0d2ae114f70191816e, >= 44f714dae50a2e795d3268a6831762aa6fa54f55, < d64f3834dffef80f0a9185a037617a54ed7f4bd2CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
Linux kernel (NVIDIA Tegra) vulnerabilities
May 11, 2026Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026Linux kernel vulnerabilities
May 7, 2026Linux kernel (GCP) vulnerabilities
May 7, 2026Linux kernel (Low Latency NVIDIA) vulnerabilities
Apr 28, 2026Linux kernel (Raspberry Pi Real-time) vulnerabilities
Apr 23, 2026Linux kernel (Oracle) vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026Linux kernel (FIPS) vulnerabilities
Apr 17, 2026Linux kernel (Real-time) vulnerabilities
Apr 17, 2026Linux kernel (GCP) vulnerabilities
Apr 17, 2026Linux kernel vulnerabilities
Apr 16, 2026Linux kernel vulnerabilities
Apr 16, 2026btrfs: don't log conflicting inode if it's a dir moved in the current transaction
Jan 13, 2026kernel: btrfs: don't log conflicting inode if it's a dir moved in the current transaction
Jan 13, 2026