Double Free Vulnerability in Linux Kernel Affecting s390 Architecture

CVE-2025-40253

What is CVE-2025-40253?

A double free vulnerability has been identified in the Linux kernel that impacts the s390 architecture. This occurs when the mpc_rcvd_sweep_req(mpcginfo) function is called, which incorrectly frees the mpcginfo object, leading to a subsequent call to kfree in the ctcmpc_unpack_skb function attempting to free the same object again. This defect has been flagged by the clang static analyzer and has been addressed by removing the redundant kfree call to prevent potential exploitation.

References