Home

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free.

PUBLISHED Reserved 2025-04-16 | Published 2025-10-28 | Updated 2025-10-29 | Assigner Linux

Product status

Default status
unaffected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before 283333079d96c84baa91f0c62b5e0cbec246b7a2
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before f992bc72f681c32a682d474a29c2135a64d4f4e5
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before 827c8efa0d1afe817b90f3618afff552e88348d2
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before bfe011297ddd2d0cd64752978baaa0c04cd20573
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before 7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before 694d5b401036a614f8080085a9de6f86ff0742dc
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before 892f41e12c8689130d552a9eb2b77bafd26484ab
affected

c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 (git) before 8f45f089337d924db24397f55697cda0e6960516
affected

Default status
affected

3.14
affected

Any version before 3.14
unaffected

5.4.301 (semver)
unaffected

5.10.246 (semver)
unaffected

5.15.195 (semver)
unaffected

6.1.156 (semver)
unaffected

6.6.112 (semver)
unaffected

6.12.53 (semver)
unaffected

6.17.3 (semver)
unaffected

6.18-rc1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/283333079d96c84baa91f0c62b5e0cbec246b7a2

git.kernel.org/...c/f992bc72f681c32a682d474a29c2135a64d4f4e5

git.kernel.org/...c/827c8efa0d1afe817b90f3618afff552e88348d2

git.kernel.org/...c/bfe011297ddd2d0cd64752978baaa0c04cd20573

git.kernel.org/...c/7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2

git.kernel.org/...c/694d5b401036a614f8080085a9de6f86ff0742dc

git.kernel.org/...c/892f41e12c8689130d552a9eb2b77bafd26484ab

git.kernel.org/...c/8f45f089337d924db24397f55697cda0e6960516

cve.org (CVE-2025-40055)

nvd.nist.gov (CVE-2025-40055)

Download JSON