5.5

CVE-2025-71314: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2025-71314DEBIAN-CVE-2025-71314
Published 03-06-2026Last modified 03-06-2026
Open JSON

Vulnerability summary

CVE-2025-71314 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.5% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 8
OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23221-1SUSE-SU-2026:23231-1SUSE-SU-2026:23237-1

Timeline

  1. 03-06-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the whole memory subsystem is blocked and flush operations never complete. When that happens, we want to: - schedule a reset, so we can recover from this situation - in the reset path, we need to reset the pending_reqs so we can send new commands after the reset - if more panthor_gpu_flush_caches() operations are queued after the timeout, we skip them and return -EIO directly to avoid needless waits (the memory block won't miraculously work again) Note that we drop the WARN_ON()s because these hangs can be triggered with buggy GPU jobs created by the UMD, and there's no way we can prevent it. We do keep the error messages though. v2: - New patch v3: - Collect R-b - Explicitly mention the fact we dropped the WARN_ON()s in the commit message v4: - No changes

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.15% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu107 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 5cd894e258c4b0b92b9b475309cea244e590d194, < 8ec4f1b14a6147db07d6e51aa1d6bcc799649847 | ≥ 5cd894e258c4b0b92b9b475309cea244e590d194, < 57753f2c64c033a21a7400b3a2192db1cd6c890e | ≥ 5cd894e258c4b0b92b9b475309cea244e590d194, < 2c899c6026fc9d39286735b30c4d8550d4ea075b | ≥ 5cd894e258c4b0b92b9b475309cea244e590d194, < 3c0a60195b37af83bbbaf223cd3a78945bace49e | 6.10
  • linux_kernel≥ 6.10, < 6.12.75 | ≥ 6.13, < 6.18.14 | ≥ 6.19, < 6.19.4
Debian1 product
  • linux< 6.12.85-1 | < 6.18.14-1

3 vendors · 110 products

References

8 links