vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-40055

ocfs2: fix double free in user_cluster_connect()

N/A
Published: October 28, 2025 at 11:48 AM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
3.14c994c2ebdbbc391a42f177c8eb7882ebf3f142d8
Vendor states this is fixed in 283333079d96c84baa91f0c62b5e0cbec246b7a2 (fixed)
Vendor states this is fixed in 694d5b401036a614f8080085a9de6f86ff0742dc (fixed)
Vendor states this is fixed in 7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2 (fixed)
Vendor states this is fixed in 827c8efa0d1afe817b90f3618afff552e88348d2 (fixed)
Vendor states this is fixed in 892f41e12c8689130d552a9eb2b77bafd26484ab (fixed)
Vendor states this is fixed in 8f45f089337d924db24397f55697cda0e6960516 (fixed)
Vendor states this is fixed in bfe011297ddd2d0cd64752978baaa0c04cd20573 (fixed)
Vendor states this is fixed in f992bc72f681c32a682d474a29c2135a64d4f4e5 (fixed)
Vendor states this is fixed in 3.14 (unaffected)
Vendor states this is fixed in 5.10.246 (unaffected)
Vendor states this is fixed in 5.15.195 (unaffected)
Vendor states this is fixed in 5.4.301 (unaffected)
Vendor states this is fixed in 6.1.156 (unaffected)
Vendor states this is fixed in 6.12.53 (unaffected)
Vendor states this is fixed in 6.17.3 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.112 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/827c8efa0d1afe817b90f3618afff552e88348d2
Source: cverecord
https://git.kernel.org/stable/c/bfe011297ddd2d0cd64752978baaa0c04cd20573
Source: cverecord
https://git.kernel.org/stable/c/7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2
Source: cverecord
https://git.kernel.org/stable/c/694d5b401036a614f8080085a9de6f86ff0742dc
Source: cverecord
https://git.kernel.org/stable/c/892f41e12c8689130d552a9eb2b77bafd26484ab
Source: cverecord
https://git.kernel.org/stable/c/8f45f089337d924db24397f55697cda0e6960516
Source: cverecord
https://git.kernel.org/stable/c/283333079d96c84baa91f0c62b5e0cbec246b7a2
Source: cverecord
https://git.kernel.org/stable/c/f992bc72f681c32a682d474a29c2135a64d4f4e5

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card