PT-2026-4370 · Linux+2 · Linux Kernel+2

Published 2025-01-01 · Updated 2026-05-07 · CVE-2025-71157

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's RDMA/core component related to reference counting within the ib del sub device and put() function. Specifically, the code fails to drop a device reference count acquired by ib device get by index() before returning an error, potentially leading to resource leaks or other issues. This issue was introduced with commit 060c642b2ab8, which added support for adding and deleting sub IB devices through netlink. The function ib del sub device and put() is involved in the process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-04911

CVE-2025-71157

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:0447-1

SUSE-SU-2026:0472-1

SUSE-SU-2026:0587-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 717

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71157.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://git.kernel.org/stable/c/fa3c411d21ebc26ffd175c7256c37cefa35020aa · Patch
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71084 · Vendor Advisory
• https://git.kernel.org/stable/c/20436f2742a92b7afeb2504eb559a98d2196b001 · Patch
• https://osv.dev/vulnerability/USN-8177-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71122 · Vendor Advisory