CVE-2025-71287

kernel: memory: mtk-smi: fix device leak on larb probe

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's mtk-smi driver. This vulnerability occurs due to a failure to properly drop a reference to the SMI device during larb probe on late probe failure or driver unbind. An attacker could potentially exploit this memory leak to cause resource exhaustion, leading to a Denial of Service (DoS) condition.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime