Skip to main content
VulnerabilityPublished Updated

CVE-2025-71191: Linux kernel · dmaengine: at_hdmac: fix device leak on of_dma_xlate()

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in f3c23b7e941349505c3d40de2cc0acd93d9ac057 : update Linux kernel when convenient.

Data as of 10 Nov 2026, 13:03 UTC

Severity
Low

Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in f3c23b7e941349505c3d40de2cc0acd93d9ac057, b9074b2d7a230b6e28caa23165e9d8bc0677d333, 987c71671367f42460689b78244d7b894c50999a +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 31 Jan 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ bbe89c8e3d598129b728d1388c3ad9abe4e8e261, < f3c23b7e941349505c3d40de2cc0acd93d9ac057
Fixed in
  • f3c23b7e941349505c3d40de2cc0acd93d9ac057
LinuxLinuxAffected
  • ≥ bbe89c8e3d598129b728d1388c3ad9abe4e8e261, < b9074b2d7a230b6e28caa23165e9d8bc0677d333
Fixed in
  • b9074b2d7a230b6e28caa23165e9d8bc0677d333
LinuxLinuxAffected
  • ≥ bbe89c8e3d598129b728d1388c3ad9abe4e8e261, < 987c71671367f42460689b78244d7b894c50999a
Fixed in
  • 987c71671367f42460689b78244d7b894c50999a
LinuxLinuxAffected
  • ≥ bbe89c8e3d598129b728d1388c3ad9abe4e8e261, < 49d964cde422dc66fea514b7ab24aa729df7081d
Fixed in
  • 49d964cde422dc66fea514b7ab24aa729df7081d
LinuxLinuxAffected
  • ≥ bbe89c8e3d598129b728d1388c3ad9abe4e8e261, < 48b2d7f530b83cb149dbf0e48f95ccadb2d90da9
Fixed in
  • 48b2d7f530b83cb149dbf0e48f95ccadb2d90da9
LinuxLinuxAffected
  • ≥ bbe89c8e3d598129b728d1388c3ad9abe4e8e261, < 6a86cf2c09e149d5718a5b7090545f7566da9334
Fixed in
  • 6a86cf2c09e149d5718a5b7090545f7566da9334

AI-suggested

A patch is available and has been applied in multiple Linux kernel commits. Users and administrators should update to a fixed Linux kernel version that includes these commits to remediate the device leak. Since this is a kernel-level fix, applying the updated kernel is the recommended remediation.

Description

A device reference leak vulnerability in the Linux kernel's dmaengine at_hdmac driver was fixed. The issue involved not properly dropping a device reference during the of_dma_xlate() function when releasing channel resources, causing a resource leak. Previous fixes addressed some error paths but did not cover successful allocations. This flaw affects Linux kernel version 3.10.

References

Community reviews

Loading reviews…