A critical deadlock vulnerability in the Linux kernel btrfs filesystem can cause system instability and denial of service.

This is a resource management flaw where the btrfs filesystem holds a lock across a writeback loop, resulting in a deadlock. The vulnerability is exploitable by an unauthenticated attacker capable of triggering filesystem operations.

Successful exploitation of this flaw results in a kernel-level deadlock, causing the affected system to freeze or crash. This leads to unplanned downtime, loss of data in flight, and potential service disruption for critical infrastructure relying on the affected Linux kernel. The CVSS score of 7.5 reflects the high impact on system availability.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, filesystem-related error messages, or unexpected system hangs.

Compensating Controls: Restrict access to systems utilizing the btrfs filesystem to trusted users and minimize non-essential filesystem write operations until patching is complete.

Public Exploit Available: Unknown

Given the potential for complete system unavailability, administrators should prioritize patching the Linux kernel across all affected environments. Apply the recommended kernel updates immediately to eliminate the risk of deadlock-induced crashes.