CVE-2025-71099: linux kernel 6.11; +1 more affected products

Affected technology

linux kernel · from 6.11.1 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 6.11
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · cdf02fe1a94a768cbcd20f5c4e1a1d805f4a06c0 to before c6d30b65b7a44dac52ad49513268adbf19eab4a2, cdf02fe1a94a768cbcd20f5c4e1a1d805f4a06c0 to before 7cdb9a9da935c687563cc682155461fef5f9b48d, cdf02fe1a94a768cbcd20f5c4e1a1d805f4a06c0 to before dcb171931954c51a1a7250d558f02b8f36570783
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: drivers/gpu/drm/xe/xe_oa.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

An attacker could guess the id and call xe_oa_remove_config_ioctl() with perfect timing, freeing oa_config before we dereference it, leading to a potential use-after-free. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.