Skip to main content
VulnerabilityPublished Updated

CVE-2025-71185: Linux kernel · dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in f810132e825588fbad3cba940458c58bb7ec4d84 : update Linux kernel when convenient.

Data as of 10 Nov 2026, 13:03 UTC

Severity
Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in f810132e825588fbad3cba940458c58bb7ec4d84, c933aa74d9f8d35e6cda322c38c4a907d37a9a2b, 30352277d8e09c972436f883a5efd1f1b763ac14 +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 31 Jan 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 42dbdcc6bf965997c088caff2a8be7f9bf44f701, < f810132e825588fbad3cba940458c58bb7ec4d84
Fixed in
  • f810132e825588fbad3cba940458c58bb7ec4d84
LinuxLinuxAffected
  • ≥ 42dbdcc6bf965997c088caff2a8be7f9bf44f701, < c933aa74d9f8d35e6cda322c38c4a907d37a9a2b
Fixed in
  • c933aa74d9f8d35e6cda322c38c4a907d37a9a2b
LinuxLinuxAffected
  • ≥ 42dbdcc6bf965997c088caff2a8be7f9bf44f701, < 30352277d8e09c972436f883a5efd1f1b763ac14
Fixed in
  • 30352277d8e09c972436f883a5efd1f1b763ac14
LinuxLinuxAffected
  • ≥ 42dbdcc6bf965997c088caff2a8be7f9bf44f701, < 43725bd47d984937c429919ae291896d982d1f17
Fixed in
  • 43725bd47d984937c429919ae291896d982d1f17
LinuxLinuxAffected
  • ≥ 42dbdcc6bf965997c088caff2a8be7f9bf44f701, < 6fdf168f57e331e148a1177a9b590a845c21b315
Fixed in
  • 6fdf168f57e331e148a1177a9b590a845c21b315
LinuxLinuxAffected
  • ≥ 42dbdcc6bf965997c088caff2a8be7f9bf44f701, < 4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9
Fixed in
  • 4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9

AI-suggested

A fix is available and has been applied in the Linux kernel source code as indicated by the fixed commit hashes. Users should update to a kernel version that includes these fixes to remediate the issue.

Description

A vulnerability in the Linux kernel's dmaengine driver for the TI dma-crossbar on am335x platforms caused a device reference leak during route allocation. This issue has been fixed by ensuring the reference taken when looking up the crossbar platform device is properly dropped.

References

Community reviews

Loading reviews…