CVE-2025-40119 — NULL Pointer Dereference in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 93.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix potential null deref in ext4_mb_init()
In ext4_mb_init(), ext4_mb_avg_fragment_size_destroy() may be called
when sbi->s_mb_avg_fragment_size remains uninitialized (e.g., if groupinfo
slab cache allocation fails). Since ext4_mb_avg_fragment_size_destroy()
lacks null pointer checking, this leads to a null pointer dereference.
EXT4-fs: no memory for groupinfo slab cache
BUG: kernel NULL pointer dereference, address: 00…
Affected Packages4 packages
▶CVEListV5linux/linuxd99d714f714c9492dc64d8ab4329b083dbfa9cab — 08d9175578d6a8e9b81921898fbf01aa669cd2be+3