BaseFortify

Publication date: 2026-01-23

Last updated on: 2026-02-26

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a reference using ib_device_get_by_index() before calling ib_del_sub_device_and_put(), we need to drop that reference before returning -EOPNOTSUPP error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-23

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-71157

EUVD

EUVD-2026-4388

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.19
linux	linux_kernel	6.19
linux	linux_kernel	6.19
linux	linux_kernel	From 6.13 (inc) to 6.18.4 (exc)
linux	linux_kernel	From 6.11 (inc) to 6.12.64 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves the Linux kernel's RDMA core where a device reference count is not properly dropped in the function ib_del_sub_device_and_put(). Specifically, when nldev_deldev() grabs a reference using ib_device_get_by_index() before calling ib_del_sub_device_and_put(), the reference needs to be dropped before returning an error (-EOPNOTSUPP). Failure to do so can lead to improper reference counting.

Impact Analysis

Improper handling of device reference counts can lead to resource leaks or inconsistent device states within the Linux kernel's RDMA subsystem. This may cause system instability or unexpected behavior related to RDMA devices.

Hi! I’m here to help you understand CVE-2025-71157. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70