Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-71084

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
13/01/2026
Última modificación:
13/01/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> RDMA/cm: Fix leaking the multicast GID table reference<br /> <br /> If the CM ID is destroyed while the CM event for multicast creating is<br /> still queued the cancel_work_sync() will prevent the work from running<br /> which also prevents destroying the ah_attr. This leaks a refcount and<br /> triggers a WARN:<br /> <br /> GID entry ref leak for dev syz1 index 2 ref=573<br /> WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline]<br /> WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886<br /> <br /> Destroy the ah_attr after canceling the work, it is safe to call this<br /> twice.

Impacto