CVE-2025-71191: Linux kernel · dmaengine: at_hdmac: fix device leak on of_dma_xlate()
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in f3c23b7e941349505c3d40de2cc0acd93d9ac057 : update Linux kernel when convenient.
Data as of 10 Nov 2026, 13:03 UTC
Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- Patch
- Available – fixed in f3c23b7e941349505c3d40de2cc0acd93d9ac057, b9074b2d7a230b6e28caa23165e9d8bc0677d333, 987c71671367f42460689b78244d7b894c50999a +4
Exploitation evidence
Disclosed: evidence found.
CVE published 31 Jan 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A patch is available and has been applied in multiple Linux kernel commits. Users and administrators should update to a fixed Linux kernel version that includes these commits to remediate the device leak. Since this is a kernel-level fix, applying the updated kernel is the recommended remediation.
Description
A device reference leak vulnerability in the Linux kernel's dmaengine at_hdmac driver was fixed. The issue involved not properly dropping a device reference during the of_dma_xlate() function when releasing channel resources, causing a resource leak. Previous fixes addressed some error paths but did not cover successful allocations. This flaw affects Linux kernel version 3.10.
References
- git.kernel.org/stable/c/49d964cde422dc66fea514b7ab24aa729df7081d (opens in a new tab)
- git.kernel.org/stable/c/4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f (opens in a new tab)
- git.kernel.org/stable/c/48b2d7f530b83cb149dbf0e48f95ccadb2d90da9 (opens in a new tab)
- git.kernel.org/stable/c/987c71671367f42460689b78244d7b894c50999a (opens in a new tab)
- git.kernel.org/stable/c/6a86cf2c09e149d5718a5b7090545f7566da9334 (opens in a new tab)
- git.kernel.org/stable/c/f3c23b7e941349505c3d40de2cc0acd93d9ac057 (opens in a new tab)
- git.kernel.org/stable/c/b9074b2d7a230b6e28caa23165e9d8bc0677d333 (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-253495.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-457936.html (opens in a new tab)