A recently assigned Linux-kernel CVE — CVE-2025-40096 — discloses a memory-management defect in the kernel DRM scheduler (drm/sched) that can produce a double free when dependency handling fails, and Microsoft’s Security Response Center (MSRC) has published a product-level attestation stating...