Riskcovery

CVE-2025-71081

ASoC: stm32: sai: fix OF node leak on probe

State
Published
Severity
Not scored
Published
Jan 13, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: sai: fix OF node leak on probe

The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the set_sync() callback fails during DAI probe.

Make sure to drop the reference on platform probe failures (e.g. probe deferral) and on driver unbind.

This also avoids a potential use-after-free in case the DAI is ever reprobed without first rebinding the platform driver.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5914d285f6b782892a91d6621723fdc41a775b15 to before 7daa50a2157e41c964b745ab1dc378b5b3b626d1Affected
  • 5914d285f6b782892a91d6621723fdc41a775b15 to before acda653169e180b1d860dbb6bc5aceb105858394Affected
  • 5914d285f6b782892a91d6621723fdc41a775b15 to before 4054a3597d047f3fe87864ef87f399b5d523e6c0Affected
  • 5914d285f6b782892a91d6621723fdc41a775b15 to before bae74771fc5d3b2a9cf6f5aa64596083d032c4a3Affected
  • 5914d285f6b782892a91d6621723fdc41a775b15 to before 3752afcc6d80d5525e236e329895ba2cb93bcb26Affected
  • 5914d285f6b782892a91d6621723fdc41a775b15 to before 23261f0de09427367e99f39f588e31e2856a690eAffected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 5.15.198 through 5.15.*Not affected
  • 6.1.160 through 6.1.*Not affected
  • 6.6.120 through 6.6.*Not affected
  • 6.12.64 through 6.12.*Not affected
  • 6.18.4 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.