A bug in the Linux kernel btrfs implementation causes a kernel warning and forces the file system to switch to read–only when the quota feature is enabled and snapshot or balance operations are performed. The error exhibits that a tree reference points to a metadata extent that no longer exists, leading to invalid memory interactions and possible corruption of the btrfs metadata structures. As a result, normal file operations can fail, data may become inconsistent, and the entire file system can become unusable without manual repair.

All Linux kernel builds containing btrfs and the quota functionality are affected, regardless of distribution. The exact affected kernel versions are not listed, so any kernel prior to the fix that supports btrfs quotas can potentially experience the issue. Users who have created snapshots or run balance commands on a quota-enabled btrfs device are at risk.

The CVSS score and EPSS are not provided, and the vulnerability is not present in the CISA KEV catalog. The risk is primarily local and requires a user with the ability to trigger snapshot or balance operations on a btrfs filesystem with quotas enabled. No remote code execution or elevated privileges are required; a local attacker can cause the kernel to flip the FS to read‑only, leading to denial of service or data loss. The exploitation probability is moderate due to the need for normal write access on a vulnerable system, while the potential impact is high because critical data may be lost or become inaccessible.