CVE-2025-71288

In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leaks on common probe Make sure to drop the reference taken when looking up the SMI device during common probe on late probe failure (e.g. probe deferral) and on driver unbind.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/6cfa038bddd710f544076ea2ef7792fc82fbedd6	Patch
https://git.kernel.org/stable/c/9704564a70399c2787f5a7c5d347add721056e9d	Patch
https://git.kernel.org/stable/c/984992f31cfb71b25cd0a72ef51ceb5dd6f187e8	Patch
https://git.kernel.org/stable/c/b16599fedf49fd42d174fba342a0b56103df3169	Patch
https://git.kernel.org/stable/c/b44d090d6ca159d94b59ad4cc44ffdaca094df82	Patch
https://git.kernel.org/stable/c/b8b2cf42b94c0a8efe43279643935256a6f58b9f	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

14 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: memoria: mtk-smi: corregir fugas de dispositivos durante la sonda común Asegúrese de liberar la referencia tomada al buscar el dispositivo SMI durante la sonda común en caso de fallo tardío de la sonda (p. ej., aplazamiento de la sonda) y al desvincular el controlador.

Information

Published : 2026-05-06 12:16

Updated : 2026-10-14 13:10

NVD link : CVE-2025-71288

Mitre link : CVE-2025-71288

CVE.ORG link : CVE-2025-71288

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2025-71288", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "47404757702ec8aa5c8310cdf58a267081f0ce6c", "lessThan": "b8b2cf42b94c0a8efe43279643935256a6f58b9f", "versionType": "git"}, {"status": "affected", "version": "47404757702ec8aa5c8310cdf58a267081f0ce6c", "lessThan": "b16599fedf49fd42d174fba342a0b56103df3169", "versionType": "git"}, {"status": "affected", "version": "47404757702ec8aa5c8310cdf58a267081f0ce6c", "lessThan": "984992f31cfb71b25cd0a72ef51ceb5dd6f187e8", "versionType": "git"}, {"status": "affected", "version": "47404757702ec8aa5c8310cdf58a267081f0ce6c", "lessThan": "b44d090d6ca159d94b59ad4cc44ffdaca094df82", "versionType": "git"}, {"status": "affected", "version": "47404757702ec8aa5c8310cdf58a267081f0ce6c", "lessThan": "9704564a70399c2787f5a7c5d347add721056e9d", "versionType": "git"}, {"status": "affected", "version": "47404757702ec8aa5c8310cdf58a267081f0ce6c", "lessThan": "6cfa038bddd710f544076ea2ef7792fc82fbedd6", "versionType": "git"}], "programFiles": ["drivers/memory/mtk-smi.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"status": "unaffected", "version": "0", "lessThan": "5.16", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.167", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.130", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.77", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.17", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/memory/mtk-smi.c"], "defaultStatus": "affected"}]}], "published": "2026-05-06T12:16:27.987", "references": [{"url": "https://git.kernel.org/stable/c/6cfa038bddd710f544076ea2ef7792fc82fbedd6", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9704564a70399c2787f5a7c5d347add721056e9d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/984992f31cfb71b25cd0a72ef51ceb5dd6f187e8", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b16599fedf49fd42d174fba342a0b56103df3169", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b44d090d6ca159d94b59ad4cc44ffdaca094df82", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b8b2cf42b94c0a8efe43279643935256a6f58b9f", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemory: mtk-smi: fix device leaks on common probe\n\nMake sure to drop the reference taken when looking up the SMI device\nduring common probe on late probe failure (e.g. probe deferral) and on\ndriver unbind."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmemoria: mtk-smi: corregir fugas de dispositivos durante la sonda com\u00fan\n\nAseg\u00farese de liberar la referencia tomada al buscar el dispositivo SMI durante la sonda com\u00fan en caso de fallo tard\u00edo de la sonda (p. ej., aplazamiento de la sonda) y al desvincular el controlador."}], "lastModified": "2026-10-14T13:10:00.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EDC6BAF-B710-4E26-B6AA-D68922EE7B43", "versionEndExcluding": "6.1.167", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C57BB918-DF28-46B3-94F7-144176841267", "versionEndExcluding": "6.6.130", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3D12E00-E42D-4056-B354-BAD4903C03A5", "versionEndExcluding": "6.12.77", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5E006E4-59C7-43C1-9231-62A72219F2BA", "versionEndExcluding": "6.18.17", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}