Memory Leak Vulnerability in Linux Kernel Affects Device Nodes

CVE-2025-71290

What is CVE-2025-71290?

A memory leak vulnerability has been identified in the Linux kernel, specifically concerning the handling of device nodes in the ti_fpc202 driver. The issue arose during the probe function, where device node references were not adequately released, potentially leading to resource exhaustion over time. A fix has been implemented using for_each_child_of_node_scoped() to streamline the code and assure that device node references are automatically freed once the loop concludes, thus enhancing overall system stability and performance.

References