Security Advisory

CVE-2025-40055

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-28 11:48:29
Last updated 2026-05-11 21:41:36
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free.