Memory Management Issue in Linux Kernel Affects Various Implementations

CVE-2025-71287

What is CVE-2025-71287?

A vulnerability in the Linux kernel's memory management system was identified that pertains to the MediaTek SMI driver during the larb probe process. The issue arises from improper handling of device references, leading to device leaks. Specifically, this occurs when the SMI device reference is not dropped during late probe failures, such as probe deferrals and driver unbinding. Addressing this vulnerability is crucial to ensure optimal memory management and resource allocation within the kernel.

References