CVE-2025-71185CWE-401

CVE-2025-71185

Medium · published January 31, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation

Make sure to drop the reference taken when looking up the crossbar

platform device during am335x route allocation.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-01-31T17:16Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernel≥ 4.4.1, < 5.10.2495.10.249
linux/linux_kernel≥ 5.11, < 5.15.1995.15.199
linux/linux_kernel≥ 5.16, < 6.1.1626.1.162
linux/linux_kernel≥ 6.2, < 6.6.1226.6.122
linux/linux_kernel≥ 6.7, < 6.12.676.12.67
linux/linux_kernel≥ 6.13, < 6.18.76.18.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
EPSS history
Timeline
  • 31 JAN 11:41Z
    dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
    cvelistv5