CVE-2025-71202
Severity
5.5MEDIUM
EPSS
0.0%
top 96.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Description
In the Linux kernel, the following vulnerability has been resolved:
iommu/sva: invalidate stale IOTLB entries for kernel address space
Introduce a new IOMMU interface to flush IOTLB paging cache entries for
the CPU kernel address space. This interface is invoked from the x86
architecture code that manages combined user and kernel page tables,
specifically before any kernel page table page is freed and reused.
This addresses the main issue with vfree() which is a common occurrence
and can be t…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages3 packages
▶CVEListV5linux/linux2f26e0a9c9860db290d63e9d85c2c8c09813677f — 9f0a7ab700f8620e433b05c57fbd26c92ea186d9+2
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-c4h6-jgrf-pj9p: In the Linux kernel, the following vulnerability has been resolved:
iommu/sva: invalidate stale IOTLB entries for kernel address space
Introduce a n↗2026-02-14
OSV▶
CVE-2025-71202: In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new↗2026-02-14
📋Vendor Advisories
3Red Hat
▶
Debian▶
CVE-2025-71202: linux - In the Linux kernel, the following vulnerability has been resolved: iommu/sva: ...↗2025