PT-2026-2597 · Linux+2 · Linux Kernel+2

Published 2026-01-13 · Updated 2026-05-07 · CVE-2025-71076

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The open parameters in the drm/xe/oa module did not validate the num syncs value, potentially allowing userspace to provide excessively large values. This could lead to excessive memory allocations. A check has been added to ensure that num syncs does not exceed the DRM XE MAX SYNCS limit, returning -EINVAL if the limit is violated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71076

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:0447-1

SUSE-SU-2026:0472-1

SUSE-SU-2026:0587-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 709

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71076.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71084 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8177-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71079 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-71076 · Security Note