CVE-2025-71109Out-of-bounds Write in Linux

CWE-787Out-of-bounds Write14 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 14
Latest updateApr 17

Description

In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e424054000878 ("MIPS: Tracing: Reduce the overhead of dynamic Function Tracer"), the macro UASM_i_LA_mostly has been used, and this macro can generate more than 2 instructions. At the same time, the code in ftrace assumes that no more than 2 instructions can be generated, which is why it stores them in an int[2] array. However, as previously

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages15 packages

Linuxlinux/linux_kernel2.6.356.12.64+1
NVDlinux/linux_kernel2.6.35.16.12.64+3
Debianlinux/linux_kernel< 6.12.69-1+1

Patches

🔴Vulnerability Details

3
OSV
MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits2026-01-14
OSV
CVE-2025-71109: In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since co2026-01-14
GHSA
GHSA-f8h3-qj6h-j2cj: In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since2026-01-14

📋Vendor Advisories

9
Ubuntu
Linux kernel (GCP) vulnerabilities2026-04-17
Ubuntu
Linux kernel (FIPS) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel (NVIDIA) vulnerabilities2026-04-17

🕵️Threat Intelligence

1
Wiz
CVE-2025-71109 Impact, Exploitability, and Mitigation Steps | Wiz