Beveiligingsadvies

CVE-2025-40253

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 16:08:15

Laatst bijgewerkt 2026-08-05 12:08:55

Toegewezen door Linux

CVSS-score 8.8

Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again. Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'. Bug detected by the clang static analyzer.

← Alle CVE's bekijken Bekijk op cve.org ↗