CVE-2025-40253s390/ctcm: Fix double-kfree
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again. Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'. Bug detected by the clang static analyzer.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 467ddbbe7e749d558f13e640f50f546149c930b3 builds before 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2; from 4d3c6d741816539b57fa1110c3f765a8c176d7b4 before 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a; from 2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 before 7616e2eee679746d526c7f5befd4eedb995935b5; from 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a before 43096dab8cc60fc39133205fd149a54d3acebea8; from 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a before 3b177b2ded563df16f6d5920671ffcfe5915d472; from 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a before b9dbfb1b5699f9f1e4991f96741bdf9047147589; from 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a before 7ff76f8dc6b550f8d16487bf3cebc278be720b5c; from 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a before da02a1824884d6c84c5e5b5ac373b0c9e3288ec2; and 11 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2
- https://git.kernel.org/stable/c/6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a
- https://git.kernel.org/stable/c/7616e2eee679746d526c7f5befd4eedb995935b5
- https://git.kernel.org/stable/c/43096dab8cc60fc39133205fd149a54d3acebea8
- https://git.kernel.org/stable/c/3b177b2ded563df16f6d5920671ffcfe5915d472
- https://git.kernel.org/stable/c/b9dbfb1b5699f9f1e4991f96741bdf9047147589
- https://git.kernel.org/stable/c/7ff76f8dc6b550f8d16487bf3cebc278be720b5c
- https://git.kernel.org/stable/c/da02a1824884d6c84c5e5b5ac373b0c9e3288ec2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.