In the Linux kernel, the following vulnerability has been resolved:

dmaengine: stm32: dmamux: fix device leak on route allocation

Make sure to drop the reference taken when looking up the DMA mux
platform device during route allocation.

Note that holding a reference to a device does not prevent its driver
data from going away so there is no point in keeping the reference.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00015.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< 3b42020e6790a5e19b36c187ed5b488a5716f97f
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< 6393da54dcb3488c080a183c4182ddec71ba8d7f
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< 1dda2a32303df0091896b01a9d09070d61fa344c
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< 1a179ac01ff3993ab97e33cc77c316ed7415cda1
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< 2fb10259d4efb4367787b5ae9c94192e8a91c648
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< 3ef52d31cce8ba816739085a61efe07b63c6cf27
df7e762db5f6c8dbd9e480f1c9ef9851de346657 affected
< dd6e4943889fb354efa3f700e42739da9bddb6ef
Linux Linux affected
Version Status Constraints
4.15 affected
—
0 unaffected
< 4.15
5.10.249 unaffected
≤ 5.10.*
5.15.199 unaffected
≤ 5.15.*
6.1.162 unaffected
≤ 6.1.*
6.6.122 unaffected
≤ 6.6.*
6.12.67 unaffected
≤ 6.12.*
6.18.7 unaffected
≤ 6.18.*
6.19 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.15:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4475-1 linux security update
Debian DLA Debian DLA DLA-4476-1 linux-6.1 security update
Debian DSA Debian DSA DSA-6126-1 linux security update
Debian DSA Debian DSA DSA-6127-1 linux security update
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1a179ac01ff3993ab97e33cc77c316ed7415cda1 cve-icon cve-icon
https://git.kernel.org/stable/c/1dda2a32303df0091896b01a9d09070d61fa344c cve-icon cve-icon
https://git.kernel.org/stable/c/2fb10259d4efb4367787b5ae9c94192e8a91c648 cve-icon cve-icon
https://git.kernel.org/stable/c/3b42020e6790a5e19b36c187ed5b488a5716f97f cve-icon cve-icon
https://git.kernel.org/stable/c/3ef52d31cce8ba816739085a61efe07b63c6cf27 cve-icon cve-icon
https://git.kernel.org/stable/c/6393da54dcb3488c080a183c4182ddec71ba8d7f cve-icon cve-icon
https://git.kernel.org/stable/c/dd6e4943889fb354efa3f700e42739da9bddb6ef cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026013118-CVE-2025-71186-48f2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-71186 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-71186 cve-icon
History

Wed, 25 Mar 2026 18:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:4.15:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Fri, 06 Feb 2026 16:45:00 +0000

Type Values Removed Values Added
References

Mon, 02 Feb 2026 12:15:00 +0000

Type Values Removed Values Added
References

Sat, 31 Jan 2026 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to drop the reference taken when looking up the DMA mux platform device during route allocation. Note that holding a reference to a device does not prevent its driver data from going away so there is no point in keeping the reference.
Title dmaengine: stm32: dmamux: fix device leak on route allocation
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:36:10.714Z

Reserved: 2026-01-31T11:36:51.187Z

Link: CVE-2025-71186

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-01-31T12:16:03.873

Modified: 2026-03-25T18:43:44.520

Link: CVE-2025-71186

cve-icon Redhat

Severity :

Publid Date: 2026-01-31T00:00:00Z

Links: CVE-2025-71186 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses