CVE-2025-71185
Vulnerability Summary
Timeline
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Make sure to drop the reference taken when looking up the crossbar platform device during am335x route allocation.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.19%• Percentile: 9%
Techniques & Countermeasures
- CWE-401•Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Affected Systems
- debian•linux
< 5.10.249-1 | < 6.1.162-1 | < 6.12.69-1 | < 6.18.8-1
- debian•linux-6.1
< 6.1.162-1~deb11u1
- ubuntu•linux
all | < 5.15.0-176.186 | < 6.8.0-117.117 | all
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
all | < 5.15.0-1105.112 | < 6.8.0-1055.58 | all
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1105.112~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.14
all
- ubuntu•linux-aws-6.17
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-aws-6.5
all
- ubuntu•linux-aws-6.8
< 6.8.0-1057.60~22.04.1
- ubuntu•linux-aws-fips
all | < 5.15.0-1105.112+fips1 | < 6.8.0-1055.58+fips1
- ubuntu•linux-aws-hwe
all
- ubuntu•linux-azure
all | all | < 5.15.0-1110.119 | < 6.8.0-1056.62 | all
- ubuntu•linux-azure-4.15
all
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1110.119~20.04.1
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
all
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.11
all
- ubuntu•linux-azure-6.14
all
- ubuntu•linux-azure-6.17
< 6.17.0-1021.21~24.04.1
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-6.5
all
- ubuntu•linux-azure-6.8
< 6.8.0-1059.65~22.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all | all | all | all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.14
all
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-azure-fde-6.8
all
- ubuntu•linux-azure-fips
all | < 5.15.0-1110.119+fips1 | < 6.8.0-1059.65+fips1
- ubuntu•linux-azure-nvidia
all
- ubuntu•linux-azure-nvidia-6.14
all
- ubuntu•linux-bluefield
all | all | < 5.15.0-1089.91 | < 6.8.0-1022.26
- ubuntu•linux-fips
all | < 5.15.0-176.186+fips1 | < 6.8.0-116.116+fips1
- ubuntu•linux-gcp
all | all | < 5.15.0-1105.114 | < 6.8.0-1058.61 | all
- ubuntu•linux-gcp-4.15
all
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
Showing first 50 affected entries in server-rendered view.
References (41)
- https://git.kernel.org/stable/c/6fdf168f57e331e148a1177a9b590a845c21b315
- https://git.kernel.org/stable/c/f810132e825588fbad3cba940458c58bb7ec4d84
- https://git.kernel.org/stable/c/30352277d8e09c972436f883a5efd1f1b763ac14
- https://git.kernel.org/stable/c/4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9
- https://git.kernel.org/stable/c/1befa553f1ecc045dc9ff56107ff50162f63f3c0
- https://git.kernel.org/stable/c/c933aa74d9f8d35e6cda322c38c4a907d37a9a2b
- https://git.kernel.org/stable/c/43725bd47d984937c429919ae291896d982d1f17
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://ubuntu.com/security/CVE-2025-71185
- https://www.cve.org/CVERecord?id=CVE-2025-71185
- https://git.kernel.org/linus/4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9
- https://ubuntu.com/security/notices/USN-8162-1
- https://ubuntu.com/security/notices/USN-8180-1
- https://ubuntu.com/security/notices/USN-8180-2
- https://ubuntu.com/security/notices/USN-8186-1
- https://ubuntu.com/security/notices/USN-8187-1
- https://ubuntu.com/security/notices/USN-8188-1
- https://ubuntu.com/security/notices/USN-8180-3
- https://ubuntu.com/security/notices/USN-8180-4
- https://ubuntu.com/security/notices/USN-8180-5
- https://ubuntu.com/security/notices/USN-8243-1
- https://ubuntu.com/security/notices/USN-8180-6
- https://ubuntu.com/security/notices/USN-8275-1
- https://ubuntu.com/security/notices/USN-8278-1
- https://ubuntu.com/security/notices/USN-8289-1
- https://ubuntu.com/security/notices/USN-8296-1
- https://ubuntu.com/security/notices/USN-8297-1
- https://ubuntu.com/security/notices/USN-8296-2
- https://ubuntu.com/security/notices/USN-8289-2
- https://ubuntu.com/security/notices/USN-8278-2
- https://ubuntu.com/security/notices/USN-8393-1
- https://ubuntu.com/security/notices/USN-8440-1
- https://ubuntu.com/security/notices/USN-8499-1
- https://ubuntu.com/security/notices/USN-8570-1
- https://ubuntu.com/security/notices/USN-8594-1
- https://ubuntu.com/security/notices/USN-8604-1
- https://ubuntu.com/security/notices/USN-8605-1
- https://ubuntu.com/security/notices/USN-8570-2
- https://security-tracker.debian.org/tracker/CVE-2025-71185
- https://ubuntu.com/security/notices/USN-8669-1