Threats tagged 'ghsa-935c-5v3p-3rp4'

CVE-2025-37904 is a medium severity vulnerability in the Linux kernel's Btrfs filesystem code. It involves an inode leak in the btrfs_iget() function that can lead to a kernel bug and system instability during unmount operations. The issue arises when btrfs_alloc_path() fails and the allocated inode is not properly released, causing busy inodes and triggering a kernel BUG. The flaw has been fixed by ensuring iget_failed() is called on failure to properly clean up resources.