CVE-2025-71190

critical

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind.

References

https://git.kernel.org/stable/c/db6f1d6d31711e73e6a214c73e6a8fb4cda0483d

https://git.kernel.org/stable/c/c80ca7bdff158401440741bdcf9175bd8608580b

https://git.kernel.org/stable/c/7c3a46ebf15a9796b763a54272407fdbf945bed8

https://git.kernel.org/stable/c/2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b

Details

Source: Mitre, NVD

Published: 2026-01-31

Updated: 2026-01-31

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00018