CVE-2025-40100 describes a vulnerability in the Btrfs filesystem within the Linux kernel. The issue stems from an incorrect assertion during the free space tree population process, specifically when a new, empty block group is created in the current transaction and its item has not yet been added to the extent tree. This can lead to a kernel bug and system crash. The severity is moderate, as it requires specific conditions related to Btrfs filesystem operations to trigger the kernel panic. While the attack vector is local, the complexity is relatively low given the described scenario. The potential impact is a denial of service due to system instability. There is currently no evidence of active exploitation, and no public exploit code is available (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage are minimal, indicating a low level of public attention for this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 4.5CNA affecteddefault affected | |
| Linux | Linux | >= a5ed91828518ab076209266c2bc510adabd078df, < 289498da343b05c886f19b4269429606f86dd17b, >= a5ed91828518ab076209266c2bc510adabd078df, < 3fdcfd91b93f930d87843156c7c8cc5fbcf9b144, >= a5ed91828518ab076209266c2bc510adabd078df, < 4f4b9ca73f84130d9fbb0fc02306ce94ce8bdbe6, >= a5ed91828518ab076209266c2bc510adabd078df, < a5a51bf4e9b7354ce7cd697e610d72c1b33fd949, >= a5ed91828518ab076209266c2bc510adabd078df, < eb145463f22d7d32d426b29fe9810de9e792b6baCNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
No social media mentions found for this CVE.
Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (AWS) vulnerabilities
Mar 23, 2026Linux kernel (Real-time) vulnerabilities
Mar 17, 2026Linux kernel (FIPS) vulnerabilities
Mar 16, 2026Linux kernel (NVIDIA) vulnerabilities
Mar 16, 2026Linux kernel vulnerabilities
Mar 16, 2026Linux kernel (Azure) vulnerabilities
Feb 24, 2026kernel: btrfs: do not assert we found block group item when creating free space tree
Oct 30, 2025btrfs: do not assert we found block group item when creating free space tree
Oct 14, 2025