CVE-2025-71071

iommu/mediatek: fix use-after-free on probe deferral

published January 13, 2026

CVSS
—
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommu/mediatek: fix use-after-free on probe deferral

The driver is dropping the references taken to the larb devices during

probe after successful lookup as well as on errors. This can

potentially lead to a use-after-free in case a larb device has not yet

been bound to its driver so that the iommu driver probe defers.

Fix this by keeping the references as expected while the iommu driver is

bound.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Published
2026-01-13T15:31Z
EPSS history
Timeline
  • 13 JAN 15:31Z
    iommu/mediatek: fix use-after-free on probe deferral
    cvelistv5