CVE-2025-71073: Input: lkkbd - disable pending work before freeing device
In the Linux kernel, the following vulnerability has been resolved:
Input: lkkbd - disable pending work before freeing device
lkkbdinterrupt() schedules lk->tq via schedulework(), and the work handler lkkbdreinit() dereferences the lkkbd structure and its serio/inputdev fields.
lkkbddisconnect() and error paths in lkkbdconnect() free the lkkbd structure without preventing the reinit work from being queued again until serioclose() returns. This can allow the work handler to run after the structure has been freed, leading to a potential use-after-free.
Use disableworksync() instead of cancelworksync() to ensure the reinit work cannot be re-queued, and call it both in lkkbddisconnect() and in lkkbdconnect() error paths after serioopen().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71073?
CVE-2025-71073 has been categorized with a moderate severity level due to potential impacts on system stability.
How do I fix CVE-2025-71073?
To fix CVE-2025-71073, it is recommended to apply the latest patches provided by the Linux kernel developers.
Which versions of the Linux kernel are affected by CVE-2025-71073?
CVE-2025-71073 affects multiple versions of the Linux kernel specifically related to the input lkkbd functionality.
What type of vulnerability is CVE-2025-71073?
CVE-2025-71073 is classified as a resource management vulnerability that can lead to system crashes or instability.
What are the potential impacts of CVE-2025-71073?
The potential impacts of CVE-2025-71073 include crashes or unintended behavior of the input device due to improper management of pending work.