CVE-2025-71199
Use-After-Free in Linux at91-sama5d2_adc Driver Causes Memory Corruption
Publication date: 2026-02-04
Last updated on: 2026-02-06
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| at91 | at91_sama5d2_adc | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential use-after-free (UAF) bug in the Linux kernel's at91-sama5d2_adc driver. It occurs because the driver schedules work to be done asynchronously using schedule_work, but if the module is removed and cleanup begins, the device structure (indio_dev) is freed later while the scheduled work might still try to access it. This can lead to the work function using memory that has already been freed.
The issue arises from a race condition between two CPUs: one CPU initiates the removal and cleanup of the device, freeing the memory, while another CPU is still executing the work handler that accesses the now freed memory. The fix involves canceling the scheduled work before proceeding with the cleanup to prevent the use-after-free scenario.
How can this vulnerability impact me? :
This vulnerability can lead to undefined behavior such as system crashes, data corruption, or potential escalation of privileges due to the use-after-free condition in the kernel driver. Since it involves kernel memory management, exploitation could compromise system stability or security.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that the Linux kernel version you are using includes the fix for the at91-sama5d2_adc driver. The fix involves canceling the scheduled work before proceeding with cleanup in the at91_adc_remove function to prevent use-after-free conditions.
If you are maintaining or compiling the kernel, update to a version where this issue is resolved. Avoid removing the at91-sama5d2_adc module without this fix applied.