CVE-2025-71071

iommu/mediatek: fix use-after-free on probe deferral

State: Published
Severity: Not scored
Published: Jan 13, 2026
Updated: May 23, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/mediatek: fix use-after-free on probe deferral

The driver is dropping the references taken to the larb devices during probe after successful lookup as well as on errors. This can potentially lead to a use-after-free in case a larb device has not yet been bound to its driver so that the iommu driver probe defers.

Fix this by keeping the references as expected while the iommu driver is bound.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8412e5dd24ffc8bc21a00bfaa0b80d4596cdc9da to before 896ec55da3b90bdb9fc04fedc17ad8c359b2eee5Affected 26593928564cf5b576ff05d3cbd958f57c9534bb to before 5c04217d06a1161aaf36267e9d971ab6f847d5a7Affected 26593928564cf5b576ff05d3cbd958f57c9534bb to before 1ef70a0b104ae8011811f60bcfaa55ff49385171Affected 26593928564cf5b576ff05d3cbd958f57c9534bb to before f6c08d3aa441bbc1956e9d65f1cbb89113a5aa8aAffected 26593928564cf5b576ff05d3cbd958f57c9534bb to before de83d4617f9fe059623e97acf7e1e10d209625b5Affected 51080de72e26771f0ed9d44982974279ccbc92b8Affected 6.1.2 to before 6.1.160Affected 6.0.16 to before 6.1Affected
LinuxLinux	6.2Affected before 6.2Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.64 through 6.12.Not affected 6.18.3 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

8412e5dd24ffc8bc21a00bfaa0b80d4596cdc9da to before 896ec55da3b90bdb9fc04fedc17ad8c359b2eee5Affected
26593928564cf5b576ff05d3cbd958f57c9534bb to before 5c04217d06a1161aaf36267e9d971ab6f847d5a7Affected
26593928564cf5b576ff05d3cbd958f57c9534bb to before 1ef70a0b104ae8011811f60bcfaa55ff49385171Affected
26593928564cf5b576ff05d3cbd958f57c9534bb to before f6c08d3aa441bbc1956e9d65f1cbb89113a5aa8aAffected
26593928564cf5b576ff05d3cbd958f57c9534bb to before de83d4617f9fe059623e97acf7e1e10d209625b5Affected
51080de72e26771f0ed9d44982974279ccbc92b8Affected
6.1.2 to before 6.1.160Affected
6.0.16 to before 6.1Affected

LinuxLinux

6.2Affected
before 6.2Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.64 through 6.12.*Not affected
6.18.3 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.