CVE-2025-71084

Katalog CVE

CVSS 5.5 · Medium EPSS 0,14%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancel_work_sync() will prevent the work from running which also prevents destroying the ah_attr. This leaks a refcount and triggers a WARN: GID entry ref leak for dev syz1 index 2 ref=573 WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline] WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 Destroy the ah_attr after canceling the work, it is safe to call this twice.

Rincian

Terbit di NVD

13 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 2,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5 patch
• https://git.kernel.org/stable/c/57f3cb6c84159d12ba343574df2115fb18dd83ca patch
• https://git.kernel.org/stable/c/5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3 patch
• https://git.kernel.org/stable/c/ab668a58c4a2ccb6d54add7a76f2f955d15d0196 patch
• https://git.kernel.org/stable/c/abf38398724ecc888f62c678d288da40d11878af patch
• https://git.kernel.org/stable/c/c0acdee513239e1d6e1b490f56be0e6837dfd162 patch
• https://git.kernel.org/stable/c/d5ce588a9552878859a4d44b70b724216c188a5f patch