Double Free Vulnerability in Linux Kernel - OCFS2 Package
Summary
DEBIAN-CVE-2025-40055: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc"... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is known for its stability and performance. The OCFS2 (Oracle Cluster File System 2) is a shared disk file system that allows multiple servers to access the same storage concurrently. This vulnerability affects the OCFS2 component of the Linux kernel, which is critical for systems relying on clustered environments.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the OCFS2 subsystem where a double free condition occurs in the user_cluster_connect() function. Specifically, the user_cluster_disconnect() function frees the 'conn->cc_private' pointer, which is assigned to 'lc'. However, during error handling, 'lc' is freed again, leading to a double free scenario. This vulnerability can potentially lead to memory corruption, crashes, or even arbitrary code execution, posing a significant risk to system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the OCFS2 functionality until the patch is applied. This may involve disabling clustered file system features or switching to alternative file systems that do not exhibit this vulnerability.
Conclusion
The CVE-2025-40055 vulnerability in the Linux kernel's OCFS2 subsystem presents a serious risk due to a double free condition that can lead to memory corruption and system instability. It is crucial for users to update their systems to the patched version to ensure security and stability. Temporary workarounds can be employed until the update is feasible.
See every vulnerability recorded for linux →
FAQ
CVE-2025-40055 is a vulnerability in the Linux kernel's OCFS2 subsystem that allows for a double free condition, potentially leading to memory corruption and security risks.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The risks include system crashes, memory corruption, and potential arbitrary code execution, which can compromise system integrity and security.
Yes, a patch is available. Users should update their Linux package to the latest version that includes the fix for CVE-2025-40055.
If an immediate update is not possible, consider disabling OCFS2 functionality as a temporary workaround to mitigate risks until the patch can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
