CVE-2025-40055

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix double free in user_cluster_connect()

user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < 283333079d96c84baa91f0c62b5e0cbec246b7a2; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < f992bc72f681c32a682d474a29c2135a64d4f4e5; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < 827c8efa0d1afe817b90f3618afff552e88348d2; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < bfe011297ddd2d0cd64752978baaa0c04cd20573; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < 7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < 694d5b401036a614f8080085a9de6f86ff0742dc; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < 892f41e12c8689130d552a9eb2b77bafd26484ab; >= c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, < 8f45f089337d924db24397f55697cda0e6960516
LinuxLinux3.14

References

Timeline

Published
Oct 28, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40056In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check The return value ofCVE-2025-40057In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vCVE-2025-400588.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty pageCVE-2025-40059In the Linux kernel, the following vulnerability has been resolved: coresight: Fix incorrect handling for return value of devm_kzalloc TheCVE-2025-40064.7A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/UCVE-2025-40060In the Linux kernel, the following vulnerability has been resolved: coresight: trbe: Return NULL pointer for allocation failures When the CVE-2025-400617.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in do_task() when draining When do_task() exhausts CVE-2025-40062In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the iniCVE-2025-400637.0In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In coCVE-2025-400647.8In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported usCVE-2025-40065In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to thCVE-2025-40066In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_a
CVE-2025-40055: Unscored | Vulnix