CVE-2025-71163CWE-401

CVE-2025-71163

Medium · published January 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: fix device leaks on compat bind and unbind

Make sure to drop the reference taken when looking up the idxd device as

part of the compat bind and unbind sysfs interface.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 11.0th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-01-25T20:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.1995.15.199
linux/linux_kernel≥ 5.16, < 6.1.1626.1.162
linux/linux_kernel≥ 6.2, < 6.6.1226.6.122
linux/linux_kernel≥ 6.7, < 6.12.676.12.67
linux/linux_kernel≥ 6.13, < 6.18.76.18.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 25 JAN 14:36Z
    dmaengine: idxd: fix device leaks on compat bind and unbind
    cvelistv5