CVE-2025-40055 — Double Free in Linux
55 documents7 sources
Severity
7.8HIGHOSV
OSV5.5OSV3.2
No vectorEPSS
0.1%
top 81.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix double free in user_cluster_connect()
user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then
the error handling frees "lc" a second time. Set "lc" to NULL on this
path to avoid a double free.
Affected Packages7 packages
▶CVEListV5linux/linuxc994c2ebdbbc391a42f177c8eb7882ebf3f142d8 — 283333079d96c84baa91f0c62b5e0cbec246b7a2+8