CVE-2025-71190

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: bcm-sba-raid: fix device leak on probe

Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < 4316e4c4fd2c09f68a262365f21847cafa8fe9dd; >= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < 4730f12a192d7314119b3d8331611ab151b87bdf; >= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < bc98e68adfef3b25c06ff08f0808bb59f787420c; >= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < c80ca7bdff158401440741bdcf9175bd8608580b; >= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < db6f1d6d31711e73e6a214c73e6a8fb4cda0483d; >= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < 2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b; >= 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b, < 7c3a46ebf15a9796b763a54272407fdbf945bed8
LinuxLinux4.13
SiemensRUGGEDCOM RST2428P (6GK6242-6PA00)< V4.0
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.7, < *

References

Timeline

Published
Jan 31, 2026
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-711915.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix device leak on of_dma_xlate() Make sure to drCVE-2025-711927.0In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac9CVE-2025-71193In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend EnablinCVE-2025-71194In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in wait_current_trans() due to ignored transaction CVE-2025-71195In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap max_register The max_register fielCVE-2025-71196In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe() The "index" variable is uCVE-2025-71197In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buCVE-2025-71198In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detecCVE-2025-71199In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adcCVE-2025-71209.8A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown fuCVE-2025-712005.5In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mCVE-2025-712017.1In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read resul
CVE-2025-71190: Medium severity, CVSS 5.5 | Vulnix