CVE-2025-71157: RDMA/core: always drop device refcount in ib_del_sub_device_and_put()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: always drop device refcount in ibdelsubdeviceandput()
Since nldevdeldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a reference using ibdevicegetbyindex() before calling ibdelsubdeviceandput(), we need to drop that reference before returning -EOPNOTSUPP error.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71157?
CVE-2025-71157 has been classified with high severity due to its potential to impact system stability and security.
How do I fix CVE-2025-71157?
To fix CVE-2025-71157, users should update the Linux kernel to the latest version that contains the patch for this vulnerability.
What systems are affected by CVE-2025-71157?
CVE-2025-71157 affects the Linux kernel across various distributions that utilize RDMA hardware interfaces.
What is the exploitation risk associated with CVE-2025-71157?
The exploitation risk associated with CVE-2025-71157 includes the possibility of denial of service and system crashes.
Is CVE-2025-71157 publicly known, and are there any existing exploits?
Yes, CVE-2025-71157 is publicly known, but currently there are no widely known exploits targeting this vulnerability.