In the Linux kernel, the following vulnerability has been resolved:

dmaengine: lpc18xx-dmamux: fix device leak on route allocation

Make sure to drop the reference taken when looking up the DMA mux
platform device during route allocation.

Note that holding a reference to a device does not prevent its driver
data from going away so there is no point in keeping the reference.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00015.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e5f4ae84be7421010780984bdc121eac15997327 affected
< 3d396ebfb3049a2b5fac51d2c967db5114b685e8
e5f4ae84be7421010780984bdc121eac15997327 affected
< 499ddae78c4baa9b94df76b2d2eb6b150d15377f
e5f4ae84be7421010780984bdc121eac15997327 affected
< adef147a8d8c3d767abf88ad2c381ffab2993086
e5f4ae84be7421010780984bdc121eac15997327 affected
< 9fba97baa520c9446df51a64708daf27c5a7ed32
e5f4ae84be7421010780984bdc121eac15997327 affected
< 992eb8055a6e5dbb808672d20d68e60d5a89b12b
e5f4ae84be7421010780984bdc121eac15997327 affected
< 1e47d80f6720f0224efd19bcf081d39637569c10
e5f4ae84be7421010780984bdc121eac15997327 affected
< d4d63059dee7e7cae0c4d9a532ed558bc90efb55
Linux Linux affected
Version Status Constraints
4.3 affected
—
0 unaffected
< 4.3
5.10.249 unaffected
≤ 5.10.*
5.15.199 unaffected
≤ 5.15.*
6.1.162 unaffected
≤ 6.1.*
6.6.122 unaffected
≤ 6.6.*
6.12.67 unaffected
≤ 6.12.*
6.18.7 unaffected
≤ 6.18.*
6.19 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.3:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1e47d80f6720f0224efd19bcf081d39637569c10 cve-icon cve-icon
https://git.kernel.org/stable/c/3d396ebfb3049a2b5fac51d2c967db5114b685e8 cve-icon cve-icon
https://git.kernel.org/stable/c/499ddae78c4baa9b94df76b2d2eb6b150d15377f cve-icon cve-icon
https://git.kernel.org/stable/c/992eb8055a6e5dbb808672d20d68e60d5a89b12b cve-icon cve-icon
https://git.kernel.org/stable/c/9fba97baa520c9446df51a64708daf27c5a7ed32 cve-icon cve-icon
https://git.kernel.org/stable/c/adef147a8d8c3d767abf88ad2c381ffab2993086 cve-icon cve-icon
https://git.kernel.org/stable/c/d4d63059dee7e7cae0c4d9a532ed558bc90efb55 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026013118-CVE-2025-71188-ba60@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-71188 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-71188 cve-icon
History

Wed, 25 Mar 2026 18:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:4.3:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Fri, 06 Feb 2026 16:45:00 +0000

Type Values Removed Values Added
References

Mon, 02 Feb 2026 12:15:00 +0000

Type Values Removed Values Added
References

Sat, 31 Jan 2026 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device leak on route allocation Make sure to drop the reference taken when looking up the DMA mux platform device during route allocation. Note that holding a reference to a device does not prevent its driver data from going away so there is no point in keeping the reference.
Title dmaengine: lpc18xx-dmamux: fix device leak on route allocation
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:36:12.766Z

Reserved: 2026-01-31T11:36:51.188Z

Link: CVE-2025-71188

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-01-31T12:16:04.067

Modified: 2026-03-25T18:39:33.880

Link: CVE-2025-71188

cve-icon Redhat

Severity :

Publid Date: 2026-01-31T00:00:00Z

Links: CVE-2025-71188 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses