Critical· 9.1official fix available
CVE-2025-71183
A flaw in the Btrfs filesystem’s log replay can cause the kernel to try deleting a directory that still contains a subvolume after a power failure, leading to a mount failure and transaction abort. The issue occurs when directories are renamed and inode references are logged incorrectly. The vulnerability has been resolved in the Linux kernel.
publishedJan 31, 2026
last modifiedJul 30, 2026
sourcesNVD
severity · cvss
9.1
critical · how bad it is
exploitation · epss
<1%
29th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 29, 2026
An official fix is available, so this entry is kept for 30 days and then removed automatically.
01
Who is affected
Linux kernel users, particularly those using Btrfs.
02
Real-world impact
System may fail to mount after an unexpected power loss, requiring manual recovery.
03
Why this severity
CVSS 9.1 (Critical) due to high impact on integrity and availability with low attack complexity.
04
What to do about it
official fix available
recommended steps
- 01Obtain the latest Linux kernel update from your distribution that includes the fix for CVE-2025-71183.
- 02Install or upgrade the kernel package.
- 03Reboot the system to load the patched kernel.
NVD description states the vulnerability has been resolved in the Linux kernel.
05
Timeline
- Jan 31, 2026 · Jan 31, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 6d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
06
How it’s attacked
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactNone
Integrity impactHigh
Availability impactHigh
07
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →