CVE-2025-71298

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/tests: shmem: Hold reservation lock around madvise

Acquire and release the GEM object's reservation lock around calls to the object's madvide operation. The tests use drm_gem_shmem_madvise_locked(), which led to errors such as show below.

[ 58.339389] WARNING: CPU: 1 PID: 1352 at drivers/gpu/drm/drm_gem_shmem_helper.c:499 drm_gem_shmem_madvise_locked+0xde/0x140

Only export the new helper drm_gem_shmem_madvise() for Kunit tests. This is not an interface for regular drivers.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 954907f7147dc43e0d1cd4d430c21d143d5fdf55, < 9cc77691b5fd615625955cedf726da57543088f1; >= 954907f7147dc43e0d1cd4d430c21d143d5fdf55, < 07cfcab370da06f26c273306571cbb0bfa3b9c52; >= 954907f7147dc43e0d1cd4d430c21d143d5fdf55, < 607d07d8cc0b835a8701259f08a03dc149b79b4f
LinuxLinux6.16

References

Timeline

Published
May 8, 2026
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-712995.5In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsCVE-2025-71309.8A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function ofCVE-2025-713005.5In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" This revCVE-2025-713015.5In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around vmap/vunmap Acquire andCVE-2025-713025.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix for dma-fence safe access rules Commit 506aa8b02a8d6 CVE-2025-713034.7In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix race condition when checking rpm_on When autosuspenCVE-2025-713045.5In the Linux kernel, the following vulnerability has been resolved: smack: /smack/doi: accept previously used values Writing to /smack/doiCVE-2025-713055.5In the Linux kernel, the following vulnerability has been resolved: drm/display/dp_mst: Add protection against 0 vcpi When releasing a timCVE-2025-713067.1In the Linux kernel, the following vulnerability has been resolved: ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec() KASAN reporteCVE-2025-713075.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug This paCVE-2025-713085.5In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential NULL pointer dereference in context cleanuCVE-2025-713095.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix deadlock in ni_read_folio_cmpr Syzbot reported a task hu
CVE-2025-71298: Medium severity, CVSS 5.5 | Vulnix