CVE-2025-71157
HIGHLinux kernel - Use After Free
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a reference using ib_device_get_by_index() before calling ib_del_sub_device_and_put(), we need to drop that reference before returning -EOPNOTSUPP error.
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
3.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
Status
published
Affected Products (6)
linux/Kernel
< 6.12.64linux
linux/Kernel
< 6.18.4linux
linux/linux_kernel
< 6.12.64
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
Timeline
Published
Jan 23, 2026
Tracked Since
Feb 18, 2026