Bug 2407343 (CVE-2025-40101) - CVE-2025-40101 kernel: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
Summary: CVE-2025-40101 kernel: btrfs: fix memory leaks when rejecting a non SINGLE da...
Keywords:
Status: NEW
Alias: CVE-2025-40101
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-10-30 10:02 UTC by OSIDB Bzimport
Modified: 2025-10-30 16:29 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-10-30 10:02:43 UTC
In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST

At the end of btrfs_load_block_group_zone_info() the first thing we do
is to ensure that if the mapping type is not a SINGLE one and there is
no RAID stripe tree, then we return early with an error.

Doing that, though, prevents the code from running the last calls from
this function which are about freeing memory allocated during its
run. Hence, in this case, instead of returning early, we set the ret
value and fall through the rest of the cleanup code.


Note You need to log in before you can comment on or make changes to this bug.