01 Record

CVE-2025-71161

dm-verity: disable recursive forward error correction

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

dm-verity: disable recursive forward error correction

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.35% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 27.2% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-01-23 15:23Z7 MO AGO

Last updated

2026-08-05 12:12Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-193Off-by-one ErrorBase
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base

Data version

5.2

Document digest

5da0801ea8d849c6b189128ce35acefe83f4ecfea4245792b23190de334a54c1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa739ff3f543afbb4a041c16cd0182c8e8d366e70 to < 8b821ca892cfeeaf0bedc9fc72717294f67144d5, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to < e227d2b229c7529bd98d348efc55262ccf24ab35, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to < 897d9006e75f46f8bd7df78faa424327ae6a4bcf, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to < 4220cb37406915c926c0e4a3dbab77cd9cceeb1e, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to < 232948cf600fba69aff36b25d85ef91a73a35756, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to < d9f3e47d3fae0c101d9094bc956ed24e7a0ee801, 4.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8b821ca892cfeeaf0bedc9fc72717294f67144d5
git.kernel.orghttps://git.kernel.org/stable/c/e227d2b229c7529bd98d348efc55262ccf24ab35
git.kernel.orghttps://git.kernel.org/stable/c/897d9006e75f46f8bd7df78faa424327ae6a4bcf
git.kernel.orghttps://git.kernel.org/stable/c/4220cb37406915c926c0e4a3dbab77cd9cceeb1e
git.kernel.orghttps://git.kernel.org/stable/c/232948cf600fba69aff36b25d85ef91a73a35756
git.kernel.orghttps://git.kernel.org/stable/c/d9f3e47d3fae0c101d9094bc956ed24e7a0ee801
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2025-71161

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-71161

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References