What’s Vulnerable › Vulnerabilities

CVE-2025-71190: dmaengine: bcm-sba-raid: fix device leak on probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-31 · updated 2026-10-19
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind.

Affected products

• Linux kernel: from 4.13.1 before 5.10.249; from 5.11 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.67; from 6.13 before 6.18.7 — fixed in 5.10.249, 5.15.199, 6.1.162, 6.12.67, 6.18.7, 6.6.122

How to fix

Upgrade to a fixed version: Linux kernel 5.10.249, 5.15.199, 6.1.162, 6.12.67. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b
• https://git.kernel.org/stable/c/4316e4c4fd2c09f68a262365f21847cafa8fe9dd
• https://git.kernel.org/stable/c/4730f12a192d7314119b3d8331611ab151b87bdf
• https://git.kernel.org/stable/c/7c3a46ebf15a9796b763a54272407fdbf945bed8
• https://git.kernel.org/stable/c/bc98e68adfef3b25c06ff08f0808bb59f787420c
• https://git.kernel.org/stable/c/c80ca7bdff158401440741bdcf9175bd8608580b
• https://git.kernel.org/stable/c/db6f1d6d31711e73e6a214c73e6a8fb4cda0483d
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html
• https://cert-portal.siemens.com/productcert/html/ssa-457936.html

Get alerted when CVE-2025-71190 or the next vulnerability affects your stack