Bug 2467148 (CVE-2025-71287)

Summary:	CVE-2025-71287 kernel: memory: mtk-smi: fix device leak on larb probe
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's `mtk-smi` driver. This vulnerability occurs due to a failure to properly drop a reference to the SMI device during `larb` probe on late probe failure or driver unbind. An attacker could potentially exploit this memory leak to cause resource exhaustion, leading to a Denial of Service (DoS) condition.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-05-06 13:06:56 UTC

In the Linux kernel, the following vulnerability has been resolved:

memory: mtk-smi: fix device leak on larb probe

Make sure to drop the reference taken when looking up the SMI device
during larb probe on late probe failure (e.g. probe deferral) and on
driver unbind.

Comment 1 Keith Grant 2026-05-06 16:49:57 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026050630-CVE-2025-71287-54ce@gregkh/T