CVE Database›Document archive›CVE-2025-71162

CVE-2025-71162

kernel: Linux kernel Tegra ADMA driver: Use-after-free vulnerability causes system crash

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · January 25, 2026

Updated · August 21, 2026

Description

A flaw was found in the Linux kernel's Tegra ADMA driver. This vulnerability, a use-after-free error, occurs when audio streams are stopped, particularly during certain error conditions known as XRUNs. A local attacker with low privileges could exploit a timing issue, where memory is released prematurely while still in use, to cause a system crash. This could lead to a denial of service, making the system unavailable, and potentially result in information disclosure or arbitrary code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference