CVE-2025-71084

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-71084
In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancel_work_sync() will prevent the work from running which also prevents destroying the ah_attr. This leaks a refcount and triggers a WARN: GID entry ref leak for dev syz1 index 2 ref=573 WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline] WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 Destroy the ah_attr after canceling the work, it is safe to call this twice.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5 Patch
https://git.kernel.org/stable/c/57f3cb6c84159d12ba343574df2115fb18dd83ca Patch
https://git.kernel.org/stable/c/5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3 Patch
https://git.kernel.org/stable/c/ab668a58c4a2ccb6d54add7a76f2f955d15d0196 Patch
https://git.kernel.org/stable/c/abf38398724ecc888f62c678d288da40d11878af Patch
https://git.kernel.org/stable/c/c0acdee513239e1d6e1b490f56be0e6837dfd162 Patch
https://git.kernel.org/stable/c/d5ce588a9552878859a4d44b70b724216c188a5f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
History

17 Jun 2026, 10:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: RDMA/cm: Soluciona la fuga de la referencia de la tabla GID de multidifusión Si el ID de CM es destruido mientras el evento de CM para la creación de multidifusión aún está en cola, la función cancel_work_sync() evitará que el trabajo se ejecute, lo que también impide destruir el ah_attr. Esto provoca una fuga de refcount y activa una ADVERTENCIA: Fuga de referencia de entrada GID para dev syz1 índice 2 ref=573 ADVERTENCIA: CPU: 1 PID: 655 en drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline] ADVERTENCIA: CPU: 1 PID: 655 en drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 Destruir el ah_attr después de cancelar el trabajo; es seguro llamar a esto dos veces.

25 Mar 2026, 19:33

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-Other
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5 - () https://git.kernel.org/stable/c/3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5 - Patch
References () https://git.kernel.org/stable/c/57f3cb6c84159d12ba343574df2115fb18dd83ca - () https://git.kernel.org/stable/c/57f3cb6c84159d12ba343574df2115fb18dd83ca - Patch
References () https://git.kernel.org/stable/c/5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3 - () https://git.kernel.org/stable/c/5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3 - Patch
References () https://git.kernel.org/stable/c/ab668a58c4a2ccb6d54add7a76f2f955d15d0196 - () https://git.kernel.org/stable/c/ab668a58c4a2ccb6d54add7a76f2f955d15d0196 - Patch
References () https://git.kernel.org/stable/c/abf38398724ecc888f62c678d288da40d11878af - () https://git.kernel.org/stable/c/abf38398724ecc888f62c678d288da40d11878af - Patch
References () https://git.kernel.org/stable/c/c0acdee513239e1d6e1b490f56be0e6837dfd162 - () https://git.kernel.org/stable/c/c0acdee513239e1d6e1b490f56be0e6837dfd162 - Patch
References () https://git.kernel.org/stable/c/d5ce588a9552878859a4d44b70b724216c188a5f - () https://git.kernel.org/stable/c/d5ce588a9552878859a4d44b70b724216c188a5f - Patch

19 Jan 2026, 13:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/abf38398724ecc888f62c678d288da40d11878af -
  • () https://git.kernel.org/stable/c/d5ce588a9552878859a4d44b70b724216c188a5f -

13 Jan 2026, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-13 16:16

Updated : 2026-06-17 10:03

NVD link : CVE-2025-71084

Mitre link : CVE-2025-71084

CVE.ORG link : CVE-2025-71084

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other