CVE-2025-71157
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
41/100
Published: 2026-01-23
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a reference using ib_device_get_by_index() before calling ib_del_sub_device_and_put(), we need to drop that reference before returning -EOPNOTSUPP error.
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | bca51197620a257e2954be99b16f05115c3b2630 < 20436f2742a92b7afeb2504eb559a98d2196b001 |
| Linux | Linux | bca51197620a257e2954be99b16f05115c3b2630 < fe8d456080423b9ed410469fbd1e2098d3acce2b |
| Linux | Linux | bca51197620a257e2954be99b16f05115c3b2630 < fa3c411d21ebc26ffd175c7256c37cefa35020aa |
| Linux | Linux | 6.11 |
| linux | linux_kernel | 6.11 – 6.12.64 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |