CVE-2025-40235 — Access of Uninitialized Pointer in Linux
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 4
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()
If fs_info->super_copy or fs_info->super_for_commit allocated failed in
btrfs_get_tree_subvol(), then no need to call btrfs_free_fs_info().
Otherwise btrfs_check_leaked_roots() would access NULL pointer because
fs_info->allocated_roots had not been initialised.
syzkaller reported the following information:
------------[ cut here ]------------
BUG…
Affected Packages5 packages
▶CVEListV5linux/linux3bb17a25bcb09abbd667c6ac86c7c9109ae82bcd — b1c2b4e6ffd307720ab6ce42f6749b0c02ba0a73+3