Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-71071— iommu/mediatek: fix use-after-free on probe deferral

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于探测延迟时过早释放larb设备引用，可能导致释放后重用。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.15% · P4

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 15

VendorProduct Version RangeStatus
Linux Linux 8412e5dd24ffc8bc21a00bfaa0b80d4596cdc9da< 896ec55da3b90bdb9fc04fedc17ad8c359b2eee5 affected
26593928564cf5b576ff05d3cbd958f57c9534bb< 5c04217d06a1161aaf36267e9d971ab6f847d5a7 affected
26593928564cf5b576ff05d3cbd958f57c9534bb< 1ef70a0b104ae8011811f60bcfaa55ff49385171 affected
26593928564cf5b576ff05d3cbd958f57c9534bb< f6c08d3aa441bbc1956e9d65f1cbb89113a5aa8a affected
26593928564cf5b576ff05d3cbd958f57c9534bb< de83d4617f9fe059623e97acf7e1e10d209625b5 affected
51080de72e26771f0ed9d44982974279ccbc92b8 affected
6.1.2< 6.1.160 affected
6.0.16< 6.1 affected
… +7 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-71071

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
iommu/mediatek: fix use-after-free on probe deferral
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the references taken to the larb devices during probe after successful lookup as well as on errors. This can potentially lead to a use-after-free in case a larb device has not yet been bound to its driver so that the iommu driver probe defers. Fix this by keeping the references as expected while the iommu driver is bound.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于探测延迟时过早释放larb设备引用，可能导致释放后重用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 8412e5dd24ffc8bc21a00bfaa0b80d4596cdc9da ~ 896ec55da3b90bdb9fc04fedc17ad8c359b2eee5 -
Linux Linux 6.2 -

II. Public POCs for CVE-2025-71071

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-71071

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-01-13 · 93 CVEs total

CVE-2025-71068 9.8 CRITICAL svcrdma: bound check rq_pages index in inline path
CVE-2025-68775 9.8 CRITICAL net/handshake: duplicate handshake cancellations leak socket
CVE-2025-68817 9.8 CRITICAL ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
CVE-2025-68794 9.8 CRITICAL iomap: adjust read range correctly for non-block-aligned positions
CVE-2025-68811 9.8 CRITICAL svcrdma: use rc_pageoff for memcpy byte offset
CVE-2025-68809 9.1 CRITICAL ksmbd: vfs: fix race on m_flags in vfs_cache
CVE-2025-71095 9.1 CRITICAL net: stmmac: fix the crash issue for zero copy XDP_TX action
CVE-2025-71093 9.1 CRITICAL e1000: fix OOB in e1000_tbi_should_accept()
CVE-2025-68818 8.8 HIGH scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
CVE-2025-71072 8.2 HIGH shmem: fix recovery on rename failures
CVE-2025-68799 8.1 HIGH caif: fix integer underflow in cffrml_receive()
CVE-2025-68803 8.0 HIGH NFSD: NFSv4 file creation neglects setting ACL
CVE-2025-68819 7.8 HIGH media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
CVE-2025-68815 7.8 HIGH net/sched: ets: Remove drr class from the active list if it changes to strict
CVE-2025-71066 7.8 HIGH net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
CVE-2025-68822 7.8 HIGH Input: alps - fix use-after-free bugs caused by dev3_register_work
CVE-2025-68792 7.8 HIGH tpm2-sessions: Fix out of range indexing in name_size
CVE-2025-68793 7.8 HIGH drm/amdgpu: fix a job->pasid access race in gpu recovery
CVE-2025-71074 7.8 HIGH functionfs: fix the open/removal races
CVE-2025-68795 7.8 HIGH ethtool: Avoid overflowing userspace buffer on stats query

Showing top 20 of 93 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-71071

No comments yet

Leave a comment