CVE-2025-71081

ASoC: stm32: sai: fix OF node leak on probe

published January 13, 2026

CVSS
—
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: sai: fix OF node leak on probe

The reference taken to the sync provider OF node when probing the

platform device is currently only dropped if the set_sync() callback

fails during DAI probe.

Make sure to drop the reference on platform probe failures (e.g. probe

deferral) and on driver unbind.

This also avoids a potential use-after-free in case the DAI is ever

reprobed without first rebinding the platform driver.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.5th percentile
Published
2026-01-13T15:34Z
EPSS history
Timeline
  • 13 JAN 15:34Z
    ASoC: stm32: sai: fix OF node leak on probe
    cvelistv5