CVE-2025-40235

CVE-2025-40235 is a Linux kernel vulnerability affecting the Btrfs filesystem. It involves a null pointer dereference within the btrfs_check_leaked_roots() function, which occurs when fs_info->super_copy or fs_info->super_for_commit allocation fails during btrfs_get_tree_subvol(). This leads to an attempt to access uninitialized memory, resulting in a kernel panic. The severity of this vulnerability is moderate. While a kernel panic can cause system instability and denial of service, the attack vector likely requires local access or specific filesystem operations to trigger. The complexity of exploitation is not explicitly detailed but appears to involve specific error handling paths within Btrfs. There is no indication of active exploitation for CVE-2025-40235. No public exploit code is available, nor has it been added to the CISA KEV catalog. Community discussion and media coverage are minimal, suggesting a low level of public awareness or concern regarding this specific vulnerability.