CVE-2025-71191: dmaengine: at_hdmac: fix device leak on of_dma_xlate()
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: athdmac: fix device leak on ofdmaxlate()
Make sure to drop the reference taken when looking up the DMA platform device during ofdmaxlate() when releasing channel resources.
Note that commit 3832b78b3ec2 ("dmaengine: athdmac: add missing putdevice() call in atdmaxlate()") fixed the leak in a couple of error paths but the reference is still leaking on successful allocation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71191?
CVE-2025-71191 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-71191?
To fix CVE-2025-71191, update your Linux kernel to a version that includes the patch addressing this vulnerability.
What is the impact of CVE-2025-71191?
CVE-2025-71191 may lead to a potential device leak in the DMA engine, which could cause resource management issues.
Which versions of the Linux kernel are affected by CVE-2025-71191?
CVE-2025-71191 affects specific versions of the Linux kernel prior to the application of the relevant security patch.
Is there a workaround for CVE-2025-71191?
There are no official workarounds available for CVE-2025-71191, so upgrading to a patched version is recommended.