PT-2025-44391 · Btrfs+3 · Btrfs+3

Published 2025-10-13 · Updated 2026-05-07 · CVE-2025-40101

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue was addressed in the Linux kernel related to the btrfs filesystem. Specifically, the issue occurs when rejecting a non-SINGLE data profile without a RAID stripe tree (RST). The btrfs load block group zone info() function fails to free allocated memory in certain scenarios, leading to memory leaks. The fix involves ensuring that cleanup code is executed even when returning early due to an invalid data profile.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Improper Resource Release

Weakness Enumeration

CWE-401

CWE-404

Related Identifiers

BDU:2026-02694

CVE-2025-40101

OPENSUSE-SU-2025:15702-1

OPENSUSE-SU-2025:20172-1

OPENSUSE-SU-2026:10301-1

SUSE-SU-2026:20012-1

SUSE-SU-2026:20015-1

SUSE-SU-2026:20021-1

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8165-1

USN-8261-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Btrfs

References · 1979

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40101.json · Exploit
• https://ubuntu.com/security/CVE-2025-40269 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39788 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40098 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38702 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8030-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40359 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40284 · Vendor Advisory