CVE-2025-71146

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.28% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 20.9% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-07-30.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-01-23 14:15Z9 MO AGO

Last updated

2026-08-05 12:12Z2 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-401Missing Release of Memory after Effective LifetimeVariant
• CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

6118e65330db2c717b89559f7ea53f86defc98cf9245941e39dc7f6072a3fd31

• git.kernel.orghttps://git.kernel.org/stable/c/08fa37f4c8c59c294e9c18fea2d083ee94074e5a
• git.kernel.orghttps://git.kernel.org/stable/c/e1ac8dce3a893641bef224ad057932f142b8a36f
• git.kernel.orghttps://git.kernel.org/stable/c/f381a33f34dda9e4023e38ba68c943bca83245e9
• git.kernel.orghttps://git.kernel.org/stable/c/325eb61bb30790ea27782203a17b007ce1754a67
• git.kernel.orghttps://git.kernel.org/stable/c/0b88be7211d21a0d68bb1e56dc805944e3654d6f
• git.kernel.orghttps://git.kernel.org/stable/c/4bd2b89f4028f250dd1c1625eb3da1979b04a5e8
• git.kernel.orghttps://git.kernel.org/stable/c/2e2a720766886190a6d35c116794693aabd332b6