CVE-2025-71190Linux vulnerability

13 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 99.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 31
Latest updateApr 17

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages13 packages

Linuxlinux/linux_kernel4.13.05.10.249+5
NVDlinux/linux_kernel4.13.15.10.249+7
Debianlinux/linux_kernel< 5.10.249-1+3
CVEListV5linux/linux743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b4316e4c4fd2c09f68a262365f21847cafa8fe9dd+7
debiandebian/linux< linux 6.1.162-1 (bookworm)

Patches

🔴Vulnerability Details

3
OSV
CVE-2025-71190: In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference2026-01-31
GHSA
GHSA-5r9g-9rch-3q5c: In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the referenc2026-01-31
OSV
dmaengine: bcm-sba-raid: fix device leak on probe2026-01-31

📋Vendor Advisories

8
Ubuntu
Linux kernel (HWE) vulnerabilities2026-04-17
Ubuntu
Linux kernel (NVIDIA) vulnerabilities2026-04-17
Ubuntu
Linux kernel (FIPS) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel vulnerabilities2026-04-16

🕵️Threat Intelligence

1
Wiz
CVE-2025-71190 Impact, Exploitability, and Mitigation Steps | Wiz