CVE-2025-71081
EUVD-2026-224813.01.2026, 16:16
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the set_sync() callback fails during DAI probe. Make sure to drop the reference on platform probe failures (e.g. probe deferral) and on driver unbind. This also avoids a potential use-after-free in case the DAI is ever reprobed without first rebinding the platform driver.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 4.15.1 ≤ 𝑥 < 5.15.198 |
| linux | linux_kernel | 5.16 ≤ 𝑥 < 6.1.160 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.6.120 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.64 |
| linux | linux_kernel | 6.13 ≤ 𝑥 < 6.18.4 |
| linux | linux_kernel | 4.15 |
| linux | linux_kernel | 6.19:rc1 |
| linux | linux_kernel | 6.19:rc2 |
| linux | linux_kernel | 6.19:rc3 |
| linux | linux_kernel | 6.19:rc4 |
| linux | linux_kernel | 6.19:rc5 |
| linux | linux_kernel | 6.19:rc6 |
| linux | linux_kernel | 6.19:rc7 |
| linux | linux_kernel | 6.19:rc8 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
Vulnerability Media Exposure
References