CVE-2025-71114

via_wdt: fix critical boot hang due to unnamed resource allocation

State: Published
Severity: Not scored
Published: Jan 14, 2026
Updated: Oct 19, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

via_wdt: fix critical boot hang due to unnamed resource allocation

The VIA watchdog driver uses allocate_resource() to reserve a MMIO region for the watchdog control register. However, the allocated resource was not given a name, which causes the kernel resource tree to contain an entry marked as "<BAD>" under /proc/iomem on x86 platforms.

During boot, this unnamed resource can lead to a critical hang because subsequent resource lookups and conflict checks fail to handle the invalid entry properly.

Scores

The record has no CVSS score.

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
LinuxLinux	dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 1d56025a3af50db0f3da2792f41eb9943eee5324Affected dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c7b986adc9e9336066350542ac5a2005d305ae78Affected dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 47c910965c936724070d2a8094a4c3ed8f452856Affected dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before d2c7c90aca7b37f60f16b2bedcfeb16204f2f35dAffected dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before f7b6370d0fbee06a867037d675797a606cb62e57Affected dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c6a2dd4f2e4e6cbdfe7a1618160281af897b75dbAffected dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 7aa31ee9ec92915926e74731378c009c9cc04928Affected
LinuxLinux	3.3Affected before 3.3Not affected 5.10.248 through 5.10.Not affected 5.15.198 through 5.15.Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.64 through 6.12.Not affected 6.18.3 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 1d56025a3af50db0f3da2792f41eb9943eee5324Affected
dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c7b986adc9e9336066350542ac5a2005d305ae78Affected
dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 47c910965c936724070d2a8094a4c3ed8f452856Affected
dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before d2c7c90aca7b37f60f16b2bedcfeb16204f2f35dAffected
dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before f7b6370d0fbee06a867037d675797a606cb62e57Affected
dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c6a2dd4f2e4e6cbdfe7a1618160281af897b75dbAffected
dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 7aa31ee9ec92915926e74731378c009c9cc04928Affected

LinuxLinux

3.3Affected
before 3.3Not affected
5.10.248 through 5.10.*Not affected
5.15.198 through 5.15.*Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.64 through 6.12.*Not affected
6.18.3 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.