CVE-2025-71122

HighCVSS 7.8/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

syzkaller found it could overflow math in the test infrastructure and cause a WARN_ON by corrupting the reserved interval tree. This only effects test kernels with CONFIG_IOMMUFD_TEST.

Validate the user input length in the test ioctl.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= f4b20bb34c83dceade5470288f48f94ce3598ada, < 4cc829d61f10c20523fd4085c1546e741a792a97; >= f4b20bb34c83dceade5470288f48f94ce3598ada, < e6c122cffcbb2e84d321ec8ba0e38ce8e7c10925; >= f4b20bb34c83dceade5470288f48f94ce3598ada, < b166b8e0a381429fefd9180e67fbc834b3cee82f; >= f4b20bb34c83dceade5470288f48f94ce3598ada, < e6a973af11135439de32ece3b9cbe3bfc043bea8
LinuxLinux6.2

References

Timeline

Published
Jan 14, 2026
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-711237.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_padCVE-2025-711245.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after error check Move thCVE-2025-711255.5In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events Synthetic events currCVE-2025-711265.5In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting Jakub reported an CVE-2025-711275.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon CVE-2025-711285.5In the Linux kernel, the following vulnerability has been resolved: erspan: Initialize options_len before referencing options. The struct CVE-2025-711295.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are nCVE-2025-71135.4A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /CVE-2025-711305.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffeCVE-2025-711315.5In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon aCVE-2025-711325.5In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPT_RT When smc91x.c is built wiCVE-2025-711337.1In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event irdma_net_event() sh
CVE-2025-71122: High severity, CVSS 7.8 | Vulnix