CVE-2025-71071

linux: In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe defe...

CVE-2025-71071 is fixed in 16 products on 1 platform, first by DEBIAN-CVE-2025-71071, released January 13, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0015
4th percentile

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the references taken to the larb devices during probe after successful lookup as well as on errors. This can potentially lead to a use-after-free in case a larb device has not yet been bound to its driver so that the iommu driver probe defers. Fix this by keeping the references as expected while the iommu driver is bound.

Where it's fixed

ProductFixed inFixReleased
Linux
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-64kb · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-azure · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-default · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.27.1.160000.2.8 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.34.1.150700.17.23.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-default-base · sles 16.0 6.12.0-160000.27.1.160000.2.8 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-docs · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-livepatch-SLE15-SP7-RT_Update_10 · sles 15.7 1-150700.1.3.1 SUSE-SU-2026:0962-1 Mar 23, 2026
kernel-livepatch-SLE15-SP7_Update_10 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-source · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-syms · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
linux · Debian 12.15 (bookworm) 6.1.162-1 DEBIAN-CVE-2025-71071 Jan 13, 2026
linux · Debian 13.5 (trixie) 6.12.69-1 DEBIAN-CVE-2025-71071 Jan 13, 2026
linux · Debian 14 6.18.3-1 DEBIAN-CVE-2025-71071 Jan 13, 2026