Vulnerability in Linux

CVE-2025-40055

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free.

EPSS: 0.002 (11.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions c994c2ebdbbc391a42f177c8eb7882ebf3f142d8, 3.14, 0

References