CVE-2025-71231
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/02/2026
Last modified:
23/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode<br />
<br />
The local variable &#39;i&#39; is initialized with -EINVAL, but the for loop<br />
immediately overwrites it and -EINVAL is never returned.<br />
<br />
If no empty compression mode can be found, the function would return the<br />
out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid<br />
array access in add_iaa_compression_mode().<br />
<br />
Fix both issues by returning either a valid index or -EINVAL.



