CVE-2025-40101

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/10/2025
Last modified:
30/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST<br /> <br /> At the end of btrfs_load_block_group_zone_info() the first thing we do<br /> is to ensure that if the mapping type is not a SINGLE one and there is<br /> no RAID stripe tree, then we return early with an error.<br /> <br /> Doing that, though, prevents the code from running the last calls from<br /> this function which are about freeing memory allocated during its<br /> run. Hence, in this case, instead of returning early, we set the ret<br /> value and fall through the rest of the cleanup code.

Impact