CVE-2025-71300: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"
In the Linux kernel, the following vulnerability has been resolved:
Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"
This reverts commit 06d22ed6b6635b17551f386b50bb5aaff9b75fbe.
OP-TEE logic in U-Boot automatically injects a reserved-memory node along with optee firmware node to kernel device tree. The injection logic is dependent on that there is no manually defined optee node. Having the node in zynqmp.dtsi effectively breaks OP-TEE's insertion of the reserved-memory node, causing memory access violations during runtime.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71300?
CVE-2025-71300 has a medium severity rating due to its potential impact on system integrity.
How do I fix CVE-2025-71300?
To fix CVE-2025-71300, ensure that your Linux kernel is updated to a version that incorporates the revert of the specified commit.
What systems are affected by CVE-2025-71300?
CVE-2025-71300 affects the Linux kernel, specifically systems using the arm64 architecture with OP-TEE integration.
What is the impact of CVE-2025-71300?
The impact of CVE-2025-71300 includes potential vulnerabilities associated with trusting unverified OP-TEE nodes in the device tree.
When was CVE-2025-71300 disclosed?
CVE-2025-71300 was disclosed in 2025 as a result of reverting a previous addition to the Linux kernel.