Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-40253

s390/ctcm: Fix double-kfree

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again. Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'. Bug detected by the clang static analyzer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 467ddbbe7e749d558f13e640f50f546149c930b3 to < 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2affected
  • 4d3c6d741816539b57fa1110c3f765a8c176d7b4 to < 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17aaffected
  • 2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 to < 7616e2eee679746d526c7f5befd4eedb995935b5affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to < 43096dab8cc60fc39133205fd149a54d3acebea8affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to < 3b177b2ded563df16f6d5920671ffcfe5915d472affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to < b9dbfb1b5699f9f1e4991f96741bdf9047147589affected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to < 7ff76f8dc6b550f8d16487bf3cebc278be720b5caffected
  • 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to < da02a1824884d6c84c5e5b5ac373b0c9e3288ec2affected
  • 36933de59f67029e5739a98393891f9b94f27e0faffected
  • d886b4292a1c5b4facdb2dfdc31f0fecc71df898affected
  • 4c9ba0fed125deba8416b995b0c274b0804c0c24affected
  • ea0053af5dab4d63a9c44563973fb2f3bfd9eb2baffected
  • 5.4.195 to < 5.4.302affected
  • 5.10.117 to < 5.10.247affected
  • 5.15.41 to < 5.15.197affected
  • 4.9.315 to < 4.10affected
  • 4.14.280 to < 4.15affected
  • 4.19.244 to < 4.20affected
  • 5.17.9 to < 5.18affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 5.4.302 to ≤ 5.4.*unaffected
  • 5.10.247 to ≤ 5.10.*unaffected
  • 5.15.197 to ≤ 5.15.*unaffected
  • 6.1.159 to ≤ 6.1.*unaffected
  • 6.6.118 to ≤ 6.6.*unaffected
  • 6.12.60 to ≤ 6.12.*unaffected
  • 6.17.10 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References