CVE-2025-71071

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
13/01/2026
Last modified:
14/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> iommu/mediatek: fix use-after-free on probe deferral<br /> <br /> The driver is dropping the references taken to the larb devices during<br /> probe after successful lookup as well as on errors. This can<br /> potentially lead to a use-after-free in case a larb device has not yet<br /> been bound to its driver so that the iommu driver probe defers.<br /> <br /> Fix this by keeping the references as expected while the iommu driver is<br /> bound.

Impact