In the Linux kernel, the following vulnerability has been resolved:
s390/ctcm: Fix double-kfree
The function 'mpcrcvdsweepreq(mpcginfo)' is called conditionally from function 'ctcmpcunpackskb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpcunpack_skb' frees it again.
Remove 'kfree' call in function 'mpcrcvdsweep_req(mpcginfo)'.
Bug detected by the clang static analyzer.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40253.json"
}