CVE-2025-71190: dmaengine: bcm-sba-raid: fix device leak on probe
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: bcm-sba-raid: fix device leak on probe
Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the Linux kernel with the bcm-sba-raid dmaengine driver involved are the relevant population. Exploitation requires local access and low privileges, according to the CVSS vector.
What is the practical impact of successful exploitation?
The reported impact is availability loss: the reference leak can persist when driver probe fails or when the driver is unbound. The CVSS vector reports no confidentiality or integrity impact.
When can the leak occur?
It can occur after the driver looks up its mailbox device and then encounters a probe failure, or when the driver is unbound. In these cases, the mailbox-device reference was not dropped.