Medium 5.5Published Jan 31, 2026

CVE-2025-71185dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation

Updated under an hour ago (Oct 27, 2026, 9:10 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Make sure to drop the reference taken when looking up the crossbar platform device during am335x route allocation.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	42dbdcc6bf965997c088caff2a8be7f9bf44f701 builds before 1befa553f1ecc045dc9ff56107ff50162f63f3c0; from 42dbdcc6bf965997c088caff2a8be7f9bf44f701 before c933aa74d9f8d35e6cda322c38c4a907d37a9a2b; from 42dbdcc6bf965997c088caff2a8be7f9bf44f701 before 43725bd47d984937c429919ae291896d982d1f17; 42dbdcc6bf965997c088caff2a8be7f9bf44f701 builds before 6fdf168f57e331e148a1177a9b590a845c21b315; from 42dbdcc6bf965997c088caff2a8be7f9bf44f701 before f810132e825588fbad3cba940458c58bb7ec4d84; from 42dbdcc6bf965997c088caff2a8be7f9bf44f701 before 30352277d8e09c972436f883a5efd1f1b763ac14; 42dbdcc6bf965997c088caff2a8be7f9bf44f701 builds before 4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V4.0	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.4.1 before 5.10.249; from 5.11 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.67; from 6.13 before 6.18.7; 4.4; 6.19; and 7 more ranges	NVD

References

References

https://git.kernel.org/stable/c/1befa553f1ecc045dc9ff56107ff50162f63f3c0	patch
https://git.kernel.org/stable/c/c933aa74d9f8d35e6cda322c38c4a907d37a9a2b	patch
https://git.kernel.org/stable/c/43725bd47d984937c429919ae291896d982d1f17	patch
https://git.kernel.org/stable/c/6fdf168f57e331e148a1177a9b590a845c21b315	patch
https://git.kernel.org/stable/c/f810132e825588fbad3cba940458c58bb7ec4d84	patch
https://git.kernel.org/stable/c/30352277d8e09c972436f883a5efd1f1b763ac14	patch
https://git.kernel.org/stable/c/4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-253495.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.