CVE-2025-40128

A folio ordering issue was found in the Linux kernel's Btrfs filesystem when handling symbolic links with block sizes larger than page size. A local user can trigger this issue by creating and reading symbolic links on Btrfs filesystems configured with block size exceeding page size (experimental feature). The symlink reading code reuses data folio paths but fails to set the correct minimal folio order for symlinks, causing kernel BUG assertions when attempting to zero folio segments, resulting in crashes and denial of service.

This CVE has been marked as Rejected by the assigning CNA.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.