CVE-2025-40253

Linux Kernel - Use-After-Free in CTCM mpc_rcvd_sweep_req

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again. Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'. Bug detected by the clang static analyzer.

Scores

EPSS 0.0006
EPSS Percentile 18.3%

Details

Status published
Products (36)
linux/Kernel < 5.4.302linux
linux/Kernel 5.11.0 - 5.15.197linux
linux/Kernel 5.16.0 - 6.1.159linux
linux/Kernel 5.18.0 - 6.6.118linux
linux/Kernel 5.5.0 - 5.10.247linux
linux/Kernel 6.2.0 - 6.12.60linux
linux/Kernel 6.7.0 - 6.17.10linux
Linux/Linux < 5.18
Linux/Linux 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a - 3b177b2ded563df16f6d5920671ffcfe5915d472
Linux/Linux 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a - 43096dab8cc60fc39133205fd149a54d3acebea8
... and 26 more
Published Dec 04, 2025
Tracked Since Feb 18, 2026