CVE-2025-38365: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38365 is a vulnerability discovered in the Linux kernel, specifically affecting the btrfs filesystem. The vulnerability was disclosed on July 25, 2025, and involves a race condition between rename operations and directory inode logging (NVD).

The vulnerability exists in the btrfs filesystem component of the Linux kernel. It manifests as a race condition between a rename operation and directory inode logging that can lead to file loss if a crash or power failure occurs before the rename completes. When the filesystem is remounted after such an event, the log replay code may incorrectly delete the file that was being renamed (NVD).

If exploited, this vulnerability can result in the permanent loss of files during specific filesystem operations. The issue occurs when there is a crash or power failure during a rename operation, leading to data loss upon the next mount of the filesystem (NVD).

The issue has been resolved in the Linux kernel through a fix that involves pinning the log root during renames before removing the old directory entry, and unpinning it after the operation is complete (NVD).