CVE-2025-71089: linux kernel from 5.2 (inclusive), before 5.15.200 (exclusive), from 5.16 (inclusive), before 6.1.163 (exclusive)…

Affected technology

linux kernel · from 5.2 (inclusive), before 5.15.200 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.163 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

Linux · 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before b34289505180a83607fcfdce14b5a290d0528476, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 7cad37e358970af1bb49030ff01f06a69fa7d985, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 240cd7f2812cc25496b12063d11c823618f364e9, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before c2c3f1a3fd74ef16cf115f0c558616a13a8471b4, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before c341dee80b5df49a936182341b36395c831c2661, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 72f98ef9a4be30d2a60136dd6faee376f780d06c
Linux

Linux · 5.2
Linux

Component: Not specified by the source
File: drivers/iommu/iommu-sva.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.