CVE-2025-71162
kernel: Linux kernel Tegra ADMA driver: Use-after-free vulnerability causes system crash
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 25, 2026
Updated · August 21, 2026
Description
A flaw was found in the Linux kernel's Tegra ADMA driver. This vulnerability, a use-after-free error, occurs when audio streams are stopped, particularly during certain error conditions known as XRUNs. A local attacker with low privileges could exploit a timing issue, where memory is released prematurely while still in use, to cause a system crash. This could lead to a denial of service, making the system unavailable, and potentially result in information disclosure or arbitrary code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 · Expired Pointer Dereference