CVE-2025-71190CWE-401

CVE-2025-71190

Medium · published January 31, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: bcm-sba-raid: fix device leak on probe

Make sure to drop the reference taken when looking up the mailbox device

during probe on probe failures and on driver unbind.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-01-31T17:16Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≥ 4.13.1, < 5.10.2495.10.249
linux/linux_kernel≥ 5.11, < 5.15.1995.15.199
linux/linux_kernel≥ 5.16, < 6.1.1626.1.162
linux/linux_kernel≥ 6.2, < 6.6.1226.6.122
linux/linux_kernel≥ 6.7, < 6.12.676.12.67
linux/linux_kernel≥ 6.13, < 6.18.76.18.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
https://git.kernel.org/stable/c/2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4316e4c4fd2c09f68a262365f21847cafa8fe9dd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4730f12a192d7314119b3d8331611ab151b87bdf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7c3a46ebf15a9796b763a54272407fdbf945bed8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bc98e68adfef3b25c06ff08f0808bb59f787420c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c80ca7bdff158401440741bdcf9175bd8608580b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/db6f1d6d31711e73e6a214c73e6a8fb4cda0483d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://cert-portal.siemens.com/productcert/html/ssa-019113.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-253495.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-457936.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 31 JAN 11:42Z
    dmaengine: bcm-sba-raid: fix device leak on probe
    cvelistv5