CVE-2025-71288
Memory Leak in MediaTek SMI Driver
Publication date: 2026-05-06
Last updated on: 2026-05-06
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is related to the Linux kernel's memory management, specifically in the mtk-smi component. It involves device leaks occurring during the common probe process. The issue arises when the system does not properly drop the reference taken while looking up the SMI device during a late probe failure, such as a probe deferral or when the driver is unbound.
How can this vulnerability impact me? :
The vulnerability can lead to device leaks in the Linux kernel, which may cause resource exhaustion or instability in the system. This could potentially degrade system performance or cause unexpected behavior during device probing or driver unbinding processes.