[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-71161":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":21,"downstream":22,"duplicates":45,"related":46,"reserved_at":9,"published_at":53,"modified_at":54,"state":55,"summary":56,"references_raw":65,"kevs":100,"epss":101,"epss_history":104,"metrics":362,"affected":368},"CVE-2025-71161","In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: disable recursive forward error correction\n\nThere are two problems with the recursive correction:\n\n1. It may cause denial-of-service. In fec_read_bufs, there is a loop that\nhas 253 iterations. For each iteration, we may call verity_hash_for_block\nrecursively. There is a limit of 4 nested recursions - that means that\nthere may be at most 253^4 (4 billion) iterations. Red Hat QE team\nactually created an image that pushes dm-verity to this limit - and this\nimage just makes the udev-worker process get stuck in the 'D' state.\n\n2. It doesn't work. In fec_read_bufs we store data into the variable\n\"fio->bufs\", but fio bufs is shared between recursive invocations, if\n\"verity_hash_for_block\" invoked correction recursively, it would\noverwrite partially filled fio->bufs.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-193","Off-by-one Error","A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.","weakness","Draft","Base",[],[],[],[],[23,25,27,29,31,33,35,37,39,41,43],{"_key":24},"SUSE-SU-2026:20838-1",{"_key":26},"OPENSUSE-SU-2026:20416-1",{"_key":28},"SUSE-SU-2026:20931-1",{"_key":30},"DEBIAN-CVE-2025-71161",{"_key":32},"SUSE-SU-2026:20873-1",{"_key":34},"UBUNTU-CVE-2025-71161",{"_key":36},"USN-8567-1",{"_key":38},"USN-8570-1",{"_key":40},"USN-8574-1",{"_key":42},"USN-8575-1",{"_key":44},"USN-8576-1",[],[47,48,49,50,51],{"_key":24},{"_key":26},{"_key":28},{"_key":32},{"_key":52},"CGA-J7H5-CJ82-H2R6","2026-01-23T15:23:59.464Z","2026-07-14T12:44:48.463Z","Modified",{"cisa_kev":57,"cisa_ransomware":57,"cisa_vendor":9,"epss_severity":58,"epss_score":59,"severity":60,"severity_score":61,"severity_version":62,"severity_source":63,"severity_vector":64,"severity_status":55},false,"low",0.00165,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[66,72,76,80,84,88,92,96],{"url":67,"sources":68,"tags":70},"https://git.kernel.org/stable/c/232948cf600fba69aff36b25d85ef91a73a35756",[69,63],"cve.org",[71],"Patch",{"url":73,"sources":74,"tags":75},"https://git.kernel.org/stable/c/d9f3e47d3fae0c101d9094bc956ed24e7a0ee801",[69,63],[71],{"url":77,"sources":78,"tags":79},"https://git.kernel.org/stable/c/e227d2b229c7529bd98d348efc55262ccf24ab35",[69,63],[],{"url":81,"sources":82,"tags":83},"https://git.kernel.org/stable/c/897d9006e75f46f8bd7df78faa424327ae6a4bcf",[69,63],[],{"url":85,"sources":86,"tags":87},"https://git.kernel.org/stable/c/4220cb37406915c926c0e4a3dbab77cd9cceeb1e",[69,63],[],{"url":89,"sources":90,"tags":91},"https://git.kernel.org/stable/c/8b821ca892cfeeaf0bedc9fc72717294f67144d5",[69,63],[],{"url":93,"sources":94,"tags":95},"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",[69],[],{"url":97,"sources":98,"tags":99},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[69],[],[],{"date":102,"score":59,"percentile":103},"2026-07-05",0.06022,[105,109,112,115,118,121,125,128,131,134,137,140,143,146,149,152,154,157,160,163,166,169,172,175,177,180,184,187,190,193,195,198,202,205,208,212,215,218,220,223,226,229,232,235,237,239,242,244,246,248,250,252,255,258,261,263,265,268,271,275,278,282,285,288,290,293,296,299,302,305,308,311,313,315,318,321,324,326,329,332,334,337,340,343,345,348,351,353,356,359],{"date":106,"score":107,"percentile":108},"2026-01-24",0.00018,0.03941,{"date":110,"score":107,"percentile":111},"2026-01-25",0.03927,{"date":113,"score":107,"percentile":114},"2026-01-26",0.03914,{"date":116,"score":107,"percentile":117},"2026-01-27",0.03896,{"date":119,"score":107,"percentile":120},"2026-01-28",0.03878,{"date":122,"score":123,"percentile":124},"2026-01-29",0.00024,0.05865,{"date":126,"score":123,"percentile":127},"2026-01-30",0.05863,{"date":129,"score":123,"percentile":130},"2026-01-31",0.05835,{"date":132,"score":123,"percentile":133},"2026-02-01",0.05891,{"date":135,"score":123,"percentile":136},"2026-02-02",0.05878,{"date":138,"score":123,"percentile":139},"2026-02-03",0.05886,{"date":141,"score":123,"percentile":142},"2026-02-04",0.0591,{"date":144,"score":123,"percentile":145},"2026-02-05",0.05967,{"date":147,"score":123,"percentile":148},"2026-02-06",0.05995,{"date":150,"score":123,"percentile":151},"2026-02-07",0.06002,{"date":153,"score":123,"percentile":148},"2026-02-08",{"date":155,"score":123,"percentile":156},"2026-02-09",0.05966,{"date":158,"score":123,"percentile":159},"2026-02-10",0.0596,{"date":161,"score":123,"percentile":162},"2026-02-11",0.0601,{"date":164,"score":123,"percentile":165},"2026-02-12",0.06041,{"date":167,"score":123,"percentile":168},"2026-02-13",0.06052,{"date":170,"score":123,"percentile":171},"2026-02-14",0.06033,{"date":173,"score":123,"percentile":174},"2026-02-15",0.06037,{"date":176,"score":123,"percentile":171},"2026-02-16",{"date":178,"score":123,"percentile":179},"2026-02-17",0.06009,{"date":181,"score":182,"percentile":183},"2026-02-18",0.0001,0.01099,{"date":185,"score":182,"percentile":186},"2026-02-19",0.01102,{"date":188,"score":182,"percentile":189},"2026-02-20",0.01107,{"date":191,"score":182,"percentile":192},"2026-02-21",0.01105,{"date":194,"score":182,"percentile":192},"2026-02-22",{"date":196,"score":182,"percentile":197},"2026-02-23",0.01077,{"date":199,"score":200,"percentile":201},"2026-02-24",0.00011,0.01313,{"date":203,"score":200,"percentile":204},"2026-02-25",0.01303,{"date":206,"score":200,"percentile":207},"2026-02-26",0.01272,{"date":209,"score":210,"percentile":211},"2026-02-27",0.00009,0.00782,{"date":213,"score":210,"percentile":214},"2026-02-28",0.00785,{"date":216,"score":210,"percentile":217},"2026-03-01",0.00786,{"date":219,"score":210,"percentile":211},"2026-03-02",{"date":221,"score":210,"percentile":222},"2026-03-03",0.00801,{"date":224,"score":210,"percentile":225},"2026-03-04",0.00798,{"date":227,"score":210,"percentile":228},"2026-03-05",0.00808,{"date":230,"score":210,"percentile":231},"2026-03-06",0.00806,{"date":233,"score":210,"percentile":234},"2026-03-07",0.00803,{"date":236,"score":210,"percentile":234},"2026-03-08",{"date":238,"score":210,"percentile":234},"2026-03-09",{"date":240,"score":210,"percentile":241},"2026-03-10",0.00804,{"date":243,"score":210,"percentile":234},"2026-03-11",{"date":245,"score":210,"percentile":231},"2026-03-12",{"date":247,"score":210,"percentile":231},"2026-03-13",{"date":249,"score":210,"percentile":222},"2026-03-14",{"date":251,"score":210,"percentile":225},"2026-03-15",{"date":253,"score":210,"percentile":254},"2026-03-16",0.00796,{"date":256,"score":210,"percentile":257},"2026-03-17",0.00793,{"date":259,"score":210,"percentile":260},"2026-03-18",0.00794,{"date":262,"score":210,"percentile":260},"2026-03-19",{"date":264,"score":210,"percentile":257},"2026-03-20",{"date":266,"score":210,"percentile":267},"2026-03-21",0.00854,{"date":269,"score":210,"percentile":270},"2026-03-22",0.00848,{"date":272,"score":273,"percentile":274},"2026-03-23",0.00008,0.00677,{"date":276,"score":273,"percentile":277},"2026-03-24",0.00676,{"date":279,"score":280,"percentile":281},"2026-03-25",0.00007,0.00541,{"date":283,"score":280,"percentile":284},"2026-03-26",0.0054,{"date":286,"score":280,"percentile":287},"2026-03-27",0.00543,{"date":289,"score":280,"percentile":281},"2026-03-28",{"date":291,"score":280,"percentile":292},"2026-03-29",0.00542,{"date":294,"score":280,"percentile":295},"2026-03-30",0.00537,{"date":297,"score":280,"percentile":298},"2026-03-31",0.00534,{"date":300,"score":273,"percentile":301},"2026-04-01",0.00724,{"date":303,"score":273,"percentile":304},"2026-04-02",0.00731,{"date":306,"score":273,"percentile":307},"2026-04-03",0.00727,{"date":309,"score":273,"percentile":310},"2026-04-04",0.00728,{"date":312,"score":273,"percentile":307},"2026-04-05",{"date":314,"score":273,"percentile":304},"2026-04-06",{"date":316,"score":273,"percentile":317},"2026-04-07",0.00733,{"date":319,"score":273,"percentile":320},"2026-04-08",0.00732,{"date":322,"score":273,"percentile":323},"2026-04-09",0.00723,{"date":325,"score":273,"percentile":301},"2026-04-10",{"date":327,"score":273,"percentile":328},"2026-04-11",0.0072,{"date":330,"score":273,"percentile":331},"2026-04-12",0.00714,{"date":333,"score":273,"percentile":331},"2026-04-13",{"date":335,"score":273,"percentile":336},"2026-04-14",0.0071,{"date":338,"score":273,"percentile":339},"2026-04-15",0.00709,{"date":341,"score":273,"percentile":342},"2026-04-16",0.00713,{"date":344,"score":273,"percentile":331},"2026-04-17",{"date":346,"score":273,"percentile":347},"2026-04-18",0.00718,{"date":349,"score":273,"percentile":350},"2026-04-19",0.00715,{"date":352,"score":273,"percentile":331},"2026-04-20",{"date":354,"score":200,"percentile":355},"2026-04-21",0.01257,{"date":357,"score":200,"percentile":358},"2026-04-22",0.0126,{"date":360,"score":200,"percentile":361},"2026-04-23",0.01265,[363],{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":364,"cvss_v4_0":9},{"baseScore":61,"baseSeverity":365,"vectorString":64,"impactScore":366,"exploitabilityScore":367},"MEDIUM",6,4.6,[369,398],{"ecosystem":9,"name":370,"vendor":371,"product":371,"cpe_part":372,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":373},"Linux","linux","a",[374,381,384,387,390,393,396],{"version":375,"is_range":376,"range_type":69,"version_start":377,"version_start_type":378,"version_end":379,"version_end_type":380,"fixed_in":9},">= a739ff3f543afbb4a041c16cd0182c8e8d366e70, \u003C 8b821ca892cfeeaf0bedc9fc72717294f67144d5",true,"a739ff3f543afbb4a041c16cd0182c8e8d366e70","including","8b821ca892cfeeaf0bedc9fc72717294f67144d5","excluding",{"version":382,"is_range":376,"range_type":69,"version_start":377,"version_start_type":378,"version_end":383,"version_end_type":380,"fixed_in":9},">= a739ff3f543afbb4a041c16cd0182c8e8d366e70, \u003C e227d2b229c7529bd98d348efc55262ccf24ab35","e227d2b229c7529bd98d348efc55262ccf24ab35",{"version":385,"is_range":376,"range_type":69,"version_start":377,"version_start_type":378,"version_end":386,"version_end_type":380,"fixed_in":9},">= a739ff3f543afbb4a041c16cd0182c8e8d366e70, \u003C 897d9006e75f46f8bd7df78faa424327ae6a4bcf","897d9006e75f46f8bd7df78faa424327ae6a4bcf",{"version":388,"is_range":376,"range_type":69,"version_start":377,"version_start_type":378,"version_end":389,"version_end_type":380,"fixed_in":9},">= a739ff3f543afbb4a041c16cd0182c8e8d366e70, \u003C 4220cb37406915c926c0e4a3dbab77cd9cceeb1e","4220cb37406915c926c0e4a3dbab77cd9cceeb1e",{"version":391,"is_range":376,"range_type":69,"version_start":377,"version_start_type":378,"version_end":392,"version_end_type":380,"fixed_in":9},">= a739ff3f543afbb4a041c16cd0182c8e8d366e70, \u003C 232948cf600fba69aff36b25d85ef91a73a35756","232948cf600fba69aff36b25d85ef91a73a35756",{"version":394,"is_range":376,"range_type":69,"version_start":377,"version_start_type":378,"version_end":395,"version_end_type":380,"fixed_in":9},">= a739ff3f543afbb4a041c16cd0182c8e8d366e70, \u003C d9f3e47d3fae0c101d9094bc956ed24e7a0ee801","d9f3e47d3fae0c101d9094bc956ed24e7a0ee801",{"version":397,"is_range":57,"range_type":69,"version_start":397,"version_start_type":378,"version_end":397,"version_end_type":378,"fixed_in":9},"4.5",{"ecosystem":9,"name":399,"vendor":371,"product":400,"cpe_part":372,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":401},"Linux Kernel","linux kernel",[402],{"version":403,"is_range":376,"range_type":404,"version_start":397,"version_start_type":378,"version_end":405,"version_end_type":380,"fixed_in":9},"gte4.5_lt6.18.6","cpe","6.18.6"]