CVE Database›Document archive›CVE-2025-71114

CVE-2025-71114

kernel: via_wdt: fix critical boot hang due to unnamed resource allocation

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · January 14, 2026

Updated · June 28, 2026

Description

A boot hang vulnerability was found in the Linux kernel's VIA watchdog timer driver. When allocating a MMIO resource for the watchdog control register, the driver fails to assign a name to the resource. This creates an invalid "<BAD>" entry in the kernel resource tree under /proc/iomem, which can cause subsequent resource lookups and conflict checks to fail, leading to a system hang during boot.

Statement

This vulnerability affects systems with VIA chipsets that use the via_wdt watchdog driver. The boot hang occurs during early system initialization when the unnamed resource causes resource management failures. Systems without VIA hardware or with the via_wdt module not loaded are not affected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the via_wdt module from being loaded if VIA watchdog timer functionality is not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-909 · Missing Initialization of Resource