IM
IronMonkey Threat Research

CVE-2025-71189 MEDIUM

Published: 2026-01-31 | Last Modified: 2026-07-14 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the reference taken to the DMA master OF node also on late route allocation failures.

Additional Descriptions (1)

En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: dmaengine: dw: dmamux: corregir fuga de nodo OF en fallo de asignación de ruta Asegúrese de liberar la referencia tomada al nodo OF maestro de DMA también en fallos tardíos de asignación de ruta.

CVSS Metrics

Base Score: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en CWE-401

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd36b185b80> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b57ff40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b185480> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b184f80> Operating System
linux linux_kernel 5.19 <built-in method update of dict object at 0x7fd36b187300> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd36b187fc0> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd36b187e80> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd369abce40> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd36b184480> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd36b1867c0> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd369325180> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd36b57dac0> Operating System
linux linux_kernel 6.19 <built-in method update of dict object at 0x7fd3686e7580> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*

References