CVE-2025-40253

CVE-2025-40253 pertains to the Linux kernel (s390/ctcm) and describes a double free vulnerability. The issue occurs when mpc_rcvd_sweep_req(mpcginfo) frees the mpcginfo object, and ctcmpc_unpack_skb subsequently calls kfree on the same object, leading to a double-free condition. The documented fi...

CVE-2025-40253 s390/ctcm: Fix double-kfree

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpcrcvdsweepreqmpcginfo' is called conditionally from function 'ctcmpcunpackskb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpcunpackskb' frees it...