-

CVE-2025-40055

ocfs2: fix double free in user_cluster_connect()

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix double free in user_cluster_connect()

user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then
the error handling frees "lc" a second time.  Set "lc" to NULL on this
path to avoid a double free.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < 283333079d96c84baa91f0c62b5e0cbec246b7a2
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < f992bc72f681c32a682d474a29c2135a64d4f4e5
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < 827c8efa0d1afe817b90f3618afff552e88348d2
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < bfe011297ddd2d0cd64752978baaa0c04cd20573
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < 7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < 694d5b401036a614f8080085a9de6f86ff0742dc
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < 892f41e12c8689130d552a9eb2b77bafd26484ab
Status affected
Version c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Version < 8f45f089337d924db24397f55697cda0e6960516
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.14
Status affected
Version 0
Version < 3.14
Status unaffected
Version <= 5.4.*
Version 5.4.301
Status unaffected
Version <= 5.10.*
Version 5.10.246
Status unaffected
Version <= 5.15.*
Version 5.15.195
Status unaffected
Version <= 6.1.*
Version 6.1.156
Status unaffected
Version <= 6.6.*
Version 6.6.112
Status unaffected
Version <= 6.12.*
Version 6.12.53
Status unaffected
Version <= 6.17.*
Version 6.17.3
Status unaffected
Version <= *
Version 6.18
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.181
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.