CVE-2025-71189

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-71189
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the reference taken to the DMA master OF node also on late route allocation failures.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6b87288581a0fcbe54b39da5c10e1aee2df8776e Patch
https://git.kernel.org/stable/c/8f7a391211381ed2f6802032c78c7820d166bc49 Patch
https://git.kernel.org/stable/c/db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1 Patch
https://git.kernel.org/stable/c/eabe40f8a53c29f531e92778ea243e379f4f7978 Patch
https://git.kernel.org/stable/c/ec25e60f9f95464aa11411db31d0906b3fb7b9f2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
History

25 Mar 2026, 18:38

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: dmaengine: dw: dmamux: corregir fuga de nodo OF en fallo de asignación de ruta Asegúrese de liberar la referencia tomada al nodo OF maestro de DMA también en fallos tardíos de asignación de ruta.
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/6b87288581a0fcbe54b39da5c10e1aee2df8776e - () https://git.kernel.org/stable/c/6b87288581a0fcbe54b39da5c10e1aee2df8776e - Patch
References () https://git.kernel.org/stable/c/8f7a391211381ed2f6802032c78c7820d166bc49 - () https://git.kernel.org/stable/c/8f7a391211381ed2f6802032c78c7820d166bc49 - Patch
References () https://git.kernel.org/stable/c/db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1 - () https://git.kernel.org/stable/c/db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1 - Patch
References () https://git.kernel.org/stable/c/eabe40f8a53c29f531e92778ea243e379f4f7978 - () https://git.kernel.org/stable/c/eabe40f8a53c29f531e92778ea243e379f4f7978 - Patch
References () https://git.kernel.org/stable/c/ec25e60f9f95464aa11411db31d0906b3fb7b9f2 - () https://git.kernel.org/stable/c/ec25e60f9f95464aa11411db31d0906b3fb7b9f2 - Patch

06 Feb 2026, 17:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/6b87288581a0fcbe54b39da5c10e1aee2df8776e -

31 Jan 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-31 12:16

Updated : 2026-03-25 18:38

NVD link : CVE-2025-71189

Mitre link : CVE-2025-71189

CVE.ORG link : CVE-2025-71189

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime