Skip to main content
VulnerabilityPublished Updated

CVE-2025-71189: Linux kernel · dmaengine: dw: dmamux: fix OF node leak on route allocation failure

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in ec25e60f9f95464aa11411db31d0906b3fb7b9f2 : update Linux kernel when convenient.

Data as of 10 Nov 2026, 13:03 UTC

Severity
Low

Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in ec25e60f9f95464aa11411db31d0906b3fb7b9f2, eabe40f8a53c29f531e92778ea243e379f4f7978, db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 31 Jan 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 134d9c52fca26d2d199516e915da00f0cc6adc73, < ec25e60f9f95464aa11411db31d0906b3fb7b9f2
Fixed in
  • ec25e60f9f95464aa11411db31d0906b3fb7b9f2
LinuxLinuxAffected
  • ≥ 134d9c52fca26d2d199516e915da00f0cc6adc73, < eabe40f8a53c29f531e92778ea243e379f4f7978
Fixed in
  • eabe40f8a53c29f531e92778ea243e379f4f7978
LinuxLinuxAffected
  • ≥ 134d9c52fca26d2d199516e915da00f0cc6adc73, < db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1
Fixed in
  • db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1
LinuxLinuxAffected
  • ≥ 134d9c52fca26d2d199516e915da00f0cc6adc73, < 8f7a391211381ed2f6802032c78c7820d166bc49
Fixed in
  • 8f7a391211381ed2f6802032c78c7820d166bc49
LinuxLinuxAffected
  • ≥ 134d9c52fca26d2d199516e915da00f0cc6adc73, < 6b87288581a0fcbe54b39da5c10e1aee2df8776e
Fixed in
  • 6b87288581a0fcbe54b39da5c10e1aee2df8776e
LinuxLinuxAffected
  • =5.19
Fixed in–

AI-suggested

A fix for this vulnerability is available in the Linux kernel as indicated by multiple fixed commits. Users and administrators should update their Linux kernel to a version that includes these fixes to remediate the issue.

Description

CVE-2025-71189 is a vulnerability in the Linux kernel's dmaengine subsystem related to the DesignWare (dw) dmamux driver. The flaw involves a resource leak of the Open Firmware (OF) node reference when route allocation fails late in the process. This issue has been fixed by ensuring the reference to the DMA master OF node is properly dropped on such failures.

References

Community reviews

Loading reviews…