CVE-2025-71122

HIGH
MEDIUM Priority: 0.02 BB Relevance: 41/100
Published: 2026-01-14 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller found it could overflow math in the test infrastructure and cause a WARN_ON by corrupting the reserved interval tree. This only effects test kernels with CONFIG_IOMMUFD_TEST. Validate the user input length in the test ioctl.

Affected Software (15)

VendorProductVersion
Linux Linux f4b20bb34c83dceade5470288f48f94ce3598ada < 4cc829d61f10c20523fd4085c1546e741a792a97
Linux Linux f4b20bb34c83dceade5470288f48f94ce3598ada < e6c122cffcbb2e84d321ec8ba0e38ce8e7c10925
Linux Linux f4b20bb34c83dceade5470288f48f94ce3598ada < b166b8e0a381429fefd9180e67fbc834b3cee82f
Linux Linux f4b20bb34c83dceade5470288f48f94ce3598ada < e6a973af11135439de32ece3b9cbe3bfc043bea8
Linux Linux 6.2
linux linux_kernel 6.2.1 – 6.6.120
linux linux_kernel 6.2
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.22%
Raw Score 0.002170
Percentile 12.3%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00217
2026-11-05
0.00217

Intelligence Sources

mitre ref →
nvd ref →