CVE-2025-71189

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the reference taken to the DMA master OF node also on late route allocation failures.

Rincian

Terbit di NVD

31 Januari 2026

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/6b87288581a0fcbe54b39da5c10e1aee2df8776e patch
• https://git.kernel.org/stable/c/8f7a391211381ed2f6802032c78c7820d166bc49 patch
• https://git.kernel.org/stable/c/db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1 patch
• https://git.kernel.org/stable/c/eabe40f8a53c29f531e92778ea243e379f4f7978 patch
• https://git.kernel.org/stable/c/ec25e60f9f95464aa11411db31d0906b3fb7b9f2 patch
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html