In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfs_iget() [BUG] There is a bug report that a syzbot reproducer can lead to the following busy inode at unmount time: BTRFS info (device loop1): last unmount of filesystem 1680000e-3c1e-4c46-84b6-56bd3909af50 VFS: Busy inodes after unmount of loop1 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:650! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 48168 Comm: syz-executor Not tainted 6.15.0-rc2-00471-g119009db2674 #2 PREEMPT(full) Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:generic_shutdown_super+0x2e9/0x390 fs/super.c:650 Call Trace: <TASK> kill_anon_super+0x3a/0x60 fs/super.c:1237 btrfs_kill_super+0x3b/0x50 fs/btrfs/super.c:2099 deactivate_locked_super+0xbe/0x1a0 fs/super.c:473 deactivate_super fs/super.c:506 [inline] deactivate_super+0xe2/0x100 fs/super.c:502 cleanup_mnt+0x21f/0x440 fs/namespace.c:1435 task_work_run+0x14d/0x240 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x269/0x290 kernel/entry/common.c:218 do_syscall_64+0xd4/0x250 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> [CAUSE] When btrfs_alloc_path() failed, btrfs_iget() directly returned without releasing the inode already allocated by btrfs_iget_locked(). This results the above busy inode and trigger the kernel BUG. [FIX] Fix it by calling iget_failed() if btrfs_alloc_path() failed. If we hit error inside btrfs_read_locked_inode(), it will properly call iget_failed(), so nothing to worry about. Although the iget_failed() cleanup inside btrfs_read_locked_inode() is a break of the normal error handling scheme, let's fix the obvious bug and backport first, then rework the error handling later.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in     btrfs_iget() [BUG] There is a bug report that a syzbot reproducer can lead to the following busy inode at     unmount time: BTRFS info (device loop1): last unmount of filesystem 1680000e-3c1e-4c46-84b6-56bd3909af50     VFS: Busy inodes after unmount of loop1 (btrfs) ------------[ cut here ]------------ kernel BUG at     fs/super.c:650! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 48168 Comm: syz-     executor Not tainted 6.15.0-rc2-00471-g119009db2674 #2 PREEMPT(full) Hardware name: QEMU Ubuntu 24.04 PC     (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:generic_shutdown_super+0x2e9/0x390     fs/super.c:650 Call Trace: <TASK> kill_anon_super+0x3a/0x60 fs/super.c:1237 btrfs_kill_super+0x3b/0x50     fs/btrfs/super.c:2099 deactivate_locked_super+0xbe/0x1a0 fs/super.c:473 deactivate_super fs/super.c:506     [inline] deactivate_super+0xe2/0x100 fs/super.c:502 cleanup_mnt+0x21f/0x440 fs/namespace.c:1435     task_work_run+0x14d/0x240 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50     [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare     include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207     [inline] syscall_exit_to_user_mode+0x269/0x290 kernel/entry/common.c:218 do_syscall_64+0xd4/0x250     arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> [CAUSE] When     btrfs_alloc_path() failed, btrfs_iget() directly returned without releasing the inode already allocated by     btrfs_iget_locked(). This results the above busy inode and trigger the kernel BUG. [FIX] Fix it by calling     iget_failed() if btrfs_alloc_path() failed. If we hit error inside btrfs_read_locked_inode(), it will     properly call iget_failed(), so nothing to worry about. Although the iget_failed() cleanup inside     btrfs_read_locked_inode() is a break of the normal error handling scheme, let's fix the obvious bug and     backport first, then rework the error handling later. (CVE-2025-37904)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7665-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - S390 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Ublk userspace block driver;

    - Bluetooth drivers;

    - ARM SCMI message protocol;

    - GPU drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Multiple devices driver;

    - Network drivers;

    - PCI subsystem;

    - PTP clock framework;

    - SPI subsystem;

    - BTRFS file system;

    - SMB network file system;

    - eXpress Data Path;

    - Universal MIDI packet (UMP) support module;

    - Tracing infrastructure;

    - Memory management;

    - IPv4 networking;

    - IPv6 networking;

    - Network traffic control;

    - AMD SoC Alsa drivers;

    - SoC Audio generic drivers; (CVE-2025-37901, CVE-2025-37990, CVE-2025-37891, CVE-2025-37918,     CVE-2025-37930, CVE-2025-37909, CVE-2025-37906, CVE-2025-37913, CVE-2025-37927, CVE-2025-37922,     CVE-2025-37899, CVE-2025-37894, CVE-2025-37934, CVE-2025-37911, CVE-2025-37912, CVE-2025-37933,     CVE-2025-37924, CVE-2025-37900, CVE-2025-37907, CVE-2025-37974, CVE-2025-37928, CVE-2025-37914,     CVE-2025-37905, CVE-2025-37921, CVE-2025-37919, CVE-2025-37915, CVE-2025-37910, CVE-2025-37903,     CVE-2025-37936, CVE-2025-37904, CVE-2025-38216, CVE-2025-37923, CVE-2025-37931, CVE-2025-37895,     CVE-2025-37917, CVE-2025-37926, CVE-2025-37916, CVE-2025-37935, CVE-2025-37898, CVE-2025-37897,     CVE-2025-37929, CVE-2025-37908, CVE-2025-37946, CVE-2025-37896, CVE-2025-37920, CVE-2025-37991)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7650-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - S390 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Ublk userspace block driver;

    - ARM SCMI message protocol;

    - GPU drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Multiple devices driver;

    - Network drivers;

    - PCI subsystem;

    - PTP clock framework;

    - SPI subsystem;

    - BTRFS file system;

    - SMB network file system;

    - eXpress Data Path;

    - Universal MIDI packet (UMP) support module;

    - Tracing infrastructure;

    - Memory management;

    - IPv4 networking;

    - IPv6 networking;

    - Network traffic control;

    - AMD SoC Alsa drivers;

    - SoC Audio generic drivers; (CVE-2025-37899, CVE-2025-37905, CVE-2025-37916, CVE-2025-37935,     CVE-2025-37923, CVE-2025-37906, CVE-2025-37929, CVE-2025-37907, CVE-2025-37909, CVE-2025-37910,     CVE-2025-37921, CVE-2025-37927, CVE-2025-38216, CVE-2025-37914, CVE-2025-37928, CVE-2025-37915,     CVE-2025-37990, CVE-2025-37917, CVE-2025-37936, CVE-2025-37946, CVE-2025-37934, CVE-2025-37894,     CVE-2025-37898, CVE-2025-37911, CVE-2025-37912, CVE-2025-37920, CVE-2025-37926, CVE-2025-37919,     CVE-2025-37900, CVE-2025-37908, CVE-2025-37924, CVE-2025-37974, CVE-2025-37901, CVE-2025-37903,     CVE-2025-37891, CVE-2025-37922, CVE-2025-37991, CVE-2025-37930, CVE-2025-37896, CVE-2025-37897,     CVE-2025-37913, CVE-2025-37895, CVE-2025-37933, CVE-2025-37904, CVE-2025-37931)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7649-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - S390 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Ublk userspace block driver;

    - Bluetooth drivers;

    - ARM SCMI message protocol;

    - GPU drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Multiple devices driver;

    - Network drivers;

    - PCI subsystem;

    - PTP clock framework;

    - SPI subsystem;

    - BTRFS file system;

    - SMB network file system;

    - eXpress Data Path;

    - Universal MIDI packet (UMP) support module;

    - Tracing infrastructure;

    - Memory management;

    - IPv4 networking;

    - IPv6 networking;

    - Network traffic control;

    - AMD SoC Alsa drivers;

    - SoC Audio generic drivers; (CVE-2025-37898, CVE-2025-37990, CVE-2025-37974, CVE-2025-37991,     CVE-2025-37894, CVE-2025-37906, CVE-2025-37896, CVE-2025-37909, CVE-2025-37923, CVE-2025-37899,     CVE-2025-37901, CVE-2025-37914, CVE-2025-38216, CVE-2025-37931, CVE-2025-37928, CVE-2025-37916,     CVE-2025-37908, CVE-2025-37915, CVE-2025-37917, CVE-2025-37921, CVE-2025-37903, CVE-2025-37922,     CVE-2025-37895, CVE-2025-37936, CVE-2025-37933, CVE-2025-37891, CVE-2025-37926, CVE-2025-37912,     CVE-2025-37920, CVE-2025-37924, CVE-2025-37927, CVE-2025-37946, CVE-2025-37907, CVE-2025-37930,     CVE-2025-37911, CVE-2025-37905, CVE-2025-37900, CVE-2025-37929, CVE-2025-37910, CVE-2025-37913,     CVE-2025-37935, CVE-2025-37919, CVE-2025-37918, CVE-2025-37897, CVE-2025-37904, CVE-2025-37934)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
244541	Linux Distros Unpatched Vulnerability : CVE-2025-37904	Nessus	Misc.	medium
242587	Ubuntu 25.04 : Linux kernel (Oracle) vulnerabilities (USN-7665-1)	Nessus	Ubuntu Local Security Checks	medium
242283	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7650-1)	Nessus	Ubuntu Local Security Checks	medium
242280	Ubuntu 25.04 : Linux kernel vulnerabilities (USN-7649-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2025-37904

medium

Tenable Plugins

medium

medium

medium

medium