A newly recorded Linux-kernel vulnerability, tracked as CVE-2025-40202, fixes a fragile implementation in the IPMI user-message accounting that could lead to improper counting and a use‑after‑free; maintainers reworked the receive-side allocation and reference‑counting so user‑message limits are...