Medium severity · published Jan 31, 2026
CVE-2025-71189
dmaengine: dw: dmamux: fix OF node leak on route allocation failure
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: dw: dmamux: fix OF node leak on route allocation failure
Make sure to drop the reference taken to the DMA master OF node also on
late route allocation failures.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
5.19.1 before 6.1.162; 6.2 before 6.6.122; 6.7 before 6.12.67; 6.13 before 6.18.7; 5.19; 6.19; +7 more · source: NVD
LI
Linux · Linux
134d9c52fca26d2d199516e915da00f0cc6adc73 before 6b87288581a0fcbe54b39da5c10e1aee2df8776e; 134d9c52fca26d2d199516e915da00f0cc6adc73 before db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1; 134d9c52fca26d2d199516e915da00f0cc6adc73 before 8f7a391211381ed2f6802032c78c7820d166bc49; 134d9c52fca26d2d199516e915da00f0cc6adc73 before eabe40f8a53c29f531e92778ea243e379f4f7978; 134d9c52fca26d2d199516e915da00f0cc6adc73 before ec25e60f9f95464aa11411db31d0906b3fb7b9f2; 5.19 · source: vendor
RR
RUGGEDCOM RST2428P · Siemens
before V4.0 · source: CISA
SS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.6; V3.1.7; V3.1.6; V3.1.7 · source: CISA
SS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens
V3.1.6; V3.1.7; V3.1.6; V3.1.7 · source: CISA
SS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.6; V3.1.7 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-71189
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-71189
Patch
https://git.kernel.org/stable/c/6b87288581a0fcbe54b39da5c10e1aee2df8776e
Patch
https://git.kernel.org/stable/c/8f7a391211381ed2f6802032c78c7820d166bc49
Patch
https://git.kernel.org/stable/c/db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1
Patch
https://git.kernel.org/stable/c/eabe40f8a53c29f531e92778ea243e379f4f7978
Patch
https://git.kernel.org/stable/c/ec25e60f9f95464aa11411db31d0906b3fb7b9f2
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability