Junglewise Threat Intelligence

CVE-2025-71287: Linux Kernel MediaTek SMI device leak in larb probe

CVE-2025-71287 · Severity: medium · CVSS 5.5 · Published 2026-05-06

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability was identified in the Linux kernel's MediaTek Smart Multimedia Interface (SMI) driver. This issue involves a memory management error where the system fails to properly release hardware references during certain driver operations. While primarily a technical stability issue, it could potentially be exploited by a local user to cause a system crash or resource exhaustion, impacting service availability.

Technical details

A reference count leak exists in the mtk-smi driver (drivers/memory/mtk-smi.c) within the Linux kernel. The vulnerability occurs because the driver fails to call put_device() to drop references taken when looking up the SMI device during a 'larb' probe if a late probe failure (such as a probe deferral) occurs or when the driver is unbound. This is classified as a missing release of memory after effective lifetime (CWE-401). An attacker with local access could potentially trigger these conditions to exhaust system resources or cause a denial-of-service. The issue has been resolved by adding the missing put_device() calls in the mtk_smi_larb_remove function and error handling paths.

Affected products

  • Linux Linux Kernel 4.6 to 5.15.203, 5.16 to 6.1.167, 6.2 to 6.6.130, 6.7 to 6.12.77, 6.13 to 6.18.17, 6.19 to 6.19.6

Timeline

  • 2025-11-21: other: Initial patch authored
  • 2026-05-06: advisory: CVE published by kernel.org
  • 2026-05-13: other: NIST analysis completed

References

Related threats