Answer in brief
CVE-2025-40253 records a Unknown severity vulnerability in s390/ctcm: Fix double-kfree. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=467ddbbe7e749d558f13e640f50f546149c930b3 <06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2 || >=4d3c6d741816539b57fa1110c3f765a8c176d7b4 <6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a || >=2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 <7616e2eee679746d526c7f5befd4eedb995935b5 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <43096dab8cc60fc39133205fd149a54d3acebea8 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <3b177b2ded563df16f6d5920671ffcfe5915d472 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <b9dbfb1b5699f9f1e4991f96741bdf9047147589 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <7ff76f8dc6b550f8d16487bf3cebc278be720b5c || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <da02a1824884d6c84c5e5b5ac373b0c9e3288ec2 || 36933de59f67029e5739a98393891f9b94f27e0f || d886b4292a1c5b4facdb2dfdc31f0fecc71df898 || 4c9ba0fed125deba8416b995b0c274b0804c0c24 || ea0053af5dab4d63a9c44563973fb2f3bfd9eb2b || >=5.4.195 <5.4.302 || >=5.10.117 <5.10.247 || >=5.15.41 <5.15.197 || >=4.9.315 <4.10 || >=4.14.280 <4.15 || >=4.19.244 <4.20 || >=5.17.9 <5.18 | 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2, 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a, 7616e2eee679746d526c7f5befd4eedb995935b5, 43096dab8cc60fc39133205fd149a54d3acebea8, 3b177b2ded563df16f6d5920671ffcfe5915d472, b9dbfb1b5699f9f1e4991f96741bdf9047147589, 7ff76f8dc6b550f8d16487bf3cebc278be720b5c, da02a1824884d6c84c5e5b5ac373b0c9e3288ec2, 5.4.302, 5.10.247, 5.15.197, 4.10, 4.15, 4.20, 5.18 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Dec 4, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again. Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'. Bug detected by the clang static analyzer.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2025-40253 records a Unknown severity vulnerability in s390/ctcm: Fix double-kfree. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=467ddbbe7e749d558f13e640f50f546149c930b3 <06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2 || >=4d3c6d741816539b57fa1110c3f765a8c176d7b4 <6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a || >=2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 <7616e2eee679746d526c7f5befd4eedb995935b5 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <43096dab8cc60fc39133205fd149a54d3acebea8 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <3b177b2ded563df16f6d5920671ffcfe5915d472 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <b9dbfb1b5699f9f1e4991f96741bdf9047147589 || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <7ff76f8dc6b550f8d16487bf3cebc278be720b5c || >=0c0b20587b9f25a2ad14db7f80ebe49bdf29920a <da02a1824884d6c84c5e5b5ac373b0c9e3288ec2 || 36933de59f67029e5739a98393891f9b94f27e0f || d886b4292a1c5b4facdb2dfdc31f0fecc71df898 || 4c9ba0fed125deba8416b995b0c274b0804c0c24 || ea0053af5dab4d63a9c44563973fb2f3bfd9eb2b || >=5.4.195 <5.4.302 || >=5.10.117 <5.10.247 || >=5.15.41 <5.15.197 || >=4.9.315 <4.10 || >=4.14.280 <4.15 || >=4.19.244 <4.20 || >=5.17.9 <5.18 | 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2, 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a, 7616e2eee679746d526c7f5befd4eedb995935b5, 43096dab8cc60fc39133205fd149a54d3acebea8, 3b177b2ded563df16f6d5920671ffcfe5915d472, b9dbfb1b5699f9f1e4991f96741bdf9047147589, 7ff76f8dc6b550f8d16487bf3cebc278be720b5c, da02a1824884d6c84c5e5b5ac373b0c9e3288ec2, 5.4.302, 5.10.247, 5.15.197, 4.10, 4.15, 4.20, 5.18 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Dec 4, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpc_unpack_skb' frees it again. Remove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'. Bug detected by the clang static analyzer.
Quoted source text, attributed separately from HOL analysis.