Riskcovery

CVE-2025-40253

s390/ctcm: Fix double-kfree

State
Published
Severity
8.8 High
Published
Dec 4, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/ctcm: Fix double-kfree

The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again.

Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'.

Bug detected by the clang static analyzer.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 467ddbbe7e749d558f13e640f50f546149c930b3 to before 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2Affected
  • 4d3c6d741816539b57fa1110c3f765a8c176d7b4 to before 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17aAffected
  • 2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 to before 7616e2eee679746d526c7f5befd4eedb995935b5Affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 43096dab8cc60fc39133205fd149a54d3acebea8Affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 3b177b2ded563df16f6d5920671ffcfe5915d472Affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before b9dbfb1b5699f9f1e4991f96741bdf9047147589Affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 7ff76f8dc6b550f8d16487bf3cebc278be720b5cAffected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before da02a1824884d6c84c5e5b5ac373b0c9e3288ec2Affected
  • 36933de59f67029e5739a98393891f9b94f27e0fAffected
  • d886b4292a1c5b4facdb2dfdc31f0fecc71df898Affected
  • 4c9ba0fed125deba8416b995b0c274b0804c0c24Affected
  • ea0053af5dab4d63a9c44563973fb2f3bfd9eb2bAffected
  • 5.4.195 to before 5.4.302Affected
  • 5.10.117 to before 5.10.247Affected
  • 5.15.41 to before 5.15.197Affected
  • 4.9.315 to before 4.10Affected
  • 4.14.280 to before 4.15Affected
  • 4.19.244 to before 4.20Affected
  • 5.17.9 to before 5.18Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 5.4.302 through 5.4.*Not affected
  • 5.10.247 through 5.10.*Not affected
  • 5.15.197 through 5.15.*Not affected
  • 6.1.159 through 6.1.*Not affected
  • 6.6.118 through 6.6.*Not affected
  • 6.12.60 through 6.12.*Not affected
  • 6.17.10 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.