# CVE-2025-71076: linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized... CVE-2025-71076 is fixed in 18 products on 1 platform, first by DEBIAN-CVE-2025-71076, released January 13, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-71076 - Priority: Routine - CVSS: 5.5 (medium) - EPSS: 0.0015 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jan 13, 2026 ## Description In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open parameters did not validate num_syncs, allowing userspace to pass arbitrarily large values, potentially leading to excessive allocations. Add check to ensure that num_syncs does not exceed DRM_XE_MAX_SYNCS, returning -EINVAL when the limit is violated. v2: use XE_IOCTL_DBG() and drop duplicated check. (Ashutosh) (cherry picked from commit e057b2d2b8d815df3858a87dffafa2af37e5945b) ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | dtb-aarch64 opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-64kb opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-64kb sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-azure opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-azure sles 15.7 | 6.4.0-150700.20.27.1 | [SUSE-SU-2026:0472-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0472-1.md) | Feb 12, 2026 | | Linux | kernel-azure sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-default opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-default sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-default sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-default-base opensuse-leap 16.0 | 6.12.0-160000.26.1.160000.2.7 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.31.1.150700.17.21.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-default-base sles 16.0 | 6.12.0-160000.26.1.160000.2.7 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-docs opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-docs sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-kvmsmall opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-kvmsmall sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-livepatch-SLE15-SP7-RT_Update_9 sles 15.7 | 1-150700.1.3.2 | [SUSE-SU-2026:0587-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0587-1.md) | Feb 20, 2026 | | Linux | kernel-livepatch-SLE15-SP7_Update_9 sles 15.7 | 1-150700.15.3.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-obs-build opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-obs-qa opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-obs-qa sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-rt opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-source opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-source sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-source sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-source-azure sles 15.7 | 6.4.0-150700.20.27.1 | [SUSE-SU-2026:0472-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0472-1.md) | Feb 12, 2026 | | Linux | kernel-syms opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-syms sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | kernel-syms-azure sles 15.7 | 6.4.0-150700.20.27.1 | [SUSE-SU-2026:0472-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0472-1.md) | Feb 12, 2026 | | Linux | kernel-zfcpdump opensuse-leap 16.0 | 6.12.0-160000.26.1 | [OPENSUSE-SU-2026:20287-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20287-1.md) | Feb 27, 2026 | | Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.31.1 | [SUSE-SU-2026:0447-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0447-1.md) | Feb 11, 2026 | | Linux | kernel-zfcpdump sles 16.0 | 6.12.0-160000.26.1 | [SUSE-SU-2026:20599-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20599-1.md) | Feb 27, 2026 | | Linux | linux Debian 13.5 (trixie) | 6.12.69-1 | [DEBIAN-CVE-2025-71076](https://patchblox.com/security/data/fix/linux/debian-cve-2025-71076.md) | Jan 13, 2026 | | Linux | linux Debian 14 | 6.18.3-1 | [DEBIAN-CVE-2025-71076](https://patchblox.com/security/data/fix/linux/debian-cve-2025-71076.md) | Jan 13, 2026 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo