CVE-2025-71191

MEDIUM

Linux Kernel - Resource Leak in DMA Engine via Missing put_device() Call

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix device leak on of_dma_xlate() Make sure to drop the reference taken when looking up the DMA platform device during of_dma_xlate() when releasing channel resources. Note that commit 3832b78b3ec2 ("dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate()") fixed the leak in a couple of error paths but the reference is still leaking on successful allocation.

References (9)

Core 9

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 8.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (25)
linux/Kernel 3.10.0 - 5.10.249linux
linux/Kernel 5.11.0 - 5.15.199linux
linux/Kernel 5.16.0 - 6.1.162linux
linux/Kernel 6.13.0 - 6.18.7linux
linux/Kernel 6.2.0 - 6.6.122linux
linux/Kernel 6.7.0 - 6.12.67linux
Linux/Linux < 3.10
Linux/Linux 3.10
Linux/Linux 5.10.249 - 5.10.*
Linux/Linux 5.15.199 - 5.15.*
... and 15 more
Published Jan 31, 2026
Tracked Since Feb 18, 2026