CVE-2025-71231

A flaw was found in the Linux kernel. A local, privileged user could exploit this by triggering a scenario where the find_empty_iaa_compression_mode function returns an out-of-bounds index. This can lead to an invalid array access, resulting in a kernel crash and a denial of service. In some cases, it may also risk memory corruption.

An out of bounds index can be returned by find_empty_iaa_compression_mode when no free compression mode slot exists. The function may return IAA_COMP_MODES_MAX which is outside the iaa_compression_modes array bounds and can lead to an invalid array access in add_iaa_compression_mode. This can result in a kernel crash and denial of service and in a conservative analysis it may also risk memory corruption depending on how the index is used by the caller. For the CVSS the PR is H in many deployments because managing compression modes is typically an administrative action performed by privileged users. The issue is not network reachable and requires local access to the relevant kernel interfaces and hardware driver path. Impact is at least denial of service with a worst case of broader memory safety consequences.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.