CVE-2025-71231

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

CVE-2025-71231 is fixed in 54 products on 1 platform, first by DEBIAN-CVE-2025-71231, released February 18, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.4
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0014
3rd percentile

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned. If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode(). Fix both issues by returning either a valid index or -EINVAL.

Where it's fixed

ProductFixed inFixReleased
Linux
dtb-aarch64 · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-64kb · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-azure · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-debug · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-default · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default · sles 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-default · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-default · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default-base · opensuse-leap 15.6 6.4.0-150600.23.92.1.150600.12.42.2 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.27.1.160000.2.8 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default-base · sles 15.6 6.4.0-150600.23.92.1.150600.12.42.2 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.34.1.150700.17.23.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-default-base · sles 16.0 6.12.0-160000.27.1.160000.2.8 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-docs · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-docs · sles 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-docs · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-kvmsmall · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-livepatch-SLE15-SP6_Update_21 · sles 15.6 1-150600.13.5.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-livepatch-SLE15-SP7-RT_Update_10 · sles 15.7 1-150700.1.3.1 SUSE-SU-2026:0962-1 Mar 23, 2026
kernel-livepatch-SLE15-SP7-RT_Update_11 · sles 15.7 1-150700.1.3.1 SUSE-SU-2026:1573-1 Apr 23, 2026
kernel-livepatch-SLE15-SP7_Update_10 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-obs-build · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-build · sles 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-obs-qa · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · sles 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-source · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-source · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-syms · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-syms · sles 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-syms · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-uek · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-devel · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-devel · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-doc · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-doc · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-tools · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-tools · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-zfcpdump · opensuse-leap 15.6 6.4.0-150600.23.92.1 SUSE-SU-2026:1041-1 Mar 25, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
linux · Debian 13.5 (trixie) 6.12.73-1 DEBIAN-CVE-2025-71231 Feb 18, 2026
linux · Debian 14 6.18.12-1 DEBIAN-CVE-2025-71231 Feb 18, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.