CVE-2025-71185

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Make sure to drop the reference taken when looking up the crossbar platform device during am335x route allocation.

Rincian

Terbit di NVD

31 Januari 2026

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1befa553f1ecc045dc9ff56107ff50162f63f3c0 patch
• https://git.kernel.org/stable/c/30352277d8e09c972436f883a5efd1f1b763ac14 patch
• https://git.kernel.org/stable/c/43725bd47d984937c429919ae291896d982d1f17 patch
• https://git.kernel.org/stable/c/4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9 patch
• https://git.kernel.org/stable/c/6fdf168f57e331e148a1177a9b590a845c21b315 patch
• https://git.kernel.org/stable/c/c933aa74d9f8d35e6cda322c38c4a907d37a9a2b patch
• https://git.kernel.org/stable/c/f810132e825588fbad3cba940458c58bb7ec4d84 patch
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html