{"id":"CVE-2025-71081","state":"PUBLISHED","title":"ASoC: stm32: sai: fix OF node leak on probe","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: stm32: sai: fix OF node leak on probe\n\nThe reference taken to the sync provider OF node when probing the\nplatform device is currently only dropped if the set_sync() callback\nfails during DAI probe.\n\nMake sure to drop the reference on platform probe failures (e.g. probe\ndeferral) and on driver unbind.\n\nThis also avoids a potential use-after-free in case the DAI is ever\nreprobed without first rebinding the platform driver.","publishedAt":"2026-01-13T15:34:45.503Z","updatedAt":"2026-05-11T21:54:22.607Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"7daa50a2157e41c964b745ab1dc378b5b3b626d1","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"acda653169e180b1d860dbb6bc5aceb105858394","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"4054a3597d047f3fe87864ef87f399b5d523e6c0","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"bae74771fc5d3b2a9cf6f5aa64596083d032c4a3","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"3752afcc6d80d5525e236e329895ba2cb93bcb26","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"23261f0de09427367e99f39f588e31e2856a690e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/soc/stm/stm32_sai.c","sound/soc/stm/stm32_sai_sub.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.15","versionType":"semver"},{"version":"5.15.198","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.160","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.120","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.64","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.4","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/soc/stm/stm32_sai.c","sound/soc/stm/stm32_sai_sub.c"]}],"references":["https://git.kernel.org/stable/c/7daa50a2157e41c964b745ab1dc378b5b3b626d1","https://git.kernel.org/stable/c/acda653169e180b1d860dbb6bc5aceb105858394","https://git.kernel.org/stable/c/4054a3597d047f3fe87864ef87f399b5d523e6c0","https://git.kernel.org/stable/c/bae74771fc5d3b2a9cf6f5aa64596083d032c4a3","https://git.kernel.org/stable/c/3752afcc6d80d5525e236e329895ba2cb93bcb26","https://git.kernel.org/stable/c/23261f0de09427367e99f39f588e31e2856a690e"],"weaknesses":[],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/71xxx/CVE-2025-71081.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-71081","state":"PUBLISHED","datePublished":"2026-01-13T15:34:45.503Z","dateUpdated":"2026-05-11T21:54:22.607Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-01-13T15:30:19.648Z"},"containers":{"cna":{"title":"ASoC: stm32: sai: fix OF node leak on probe","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: stm32: sai: fix OF node leak on probe\n\nThe reference taken to the sync provider OF node when probing the\nplatform device is currently only dropped if the set_sync() callback\nfails during DAI probe.\n\nMake sure to drop the reference on platform probe failures (e.g. probe\ndeferral) and on driver unbind.\n\nThis also avoids a potential use-after-free in case the DAI is ever\nreprobed without first rebinding the platform driver."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"7daa50a2157e41c964b745ab1dc378b5b3b626d1","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"acda653169e180b1d860dbb6bc5aceb105858394","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"4054a3597d047f3fe87864ef87f399b5d523e6c0","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"bae74771fc5d3b2a9cf6f5aa64596083d032c4a3","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"3752afcc6d80d5525e236e329895ba2cb93bcb26","versionType":"git"},{"version":"5914d285f6b782892a91d6621723fdc41a775b15","status":"affected","lessThan":"23261f0de09427367e99f39f588e31e2856a690e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/soc/stm/stm32_sai.c","sound/soc/stm/stm32_sai_sub.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.15","versionType":"semver"},{"version":"5.15.198","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.160","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.120","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.64","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.4","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/soc/stm/stm32_sai.c","sound/soc/stm/stm32_sai_sub.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/7daa50a2157e41c964b745ab1dc378b5b3b626d1"},{"url":"https://git.kernel.org/stable/c/acda653169e180b1d860dbb6bc5aceb105858394"},{"url":"https://git.kernel.org/stable/c/4054a3597d047f3fe87864ef87f399b5d523e6c0"},{"url":"https://git.kernel.org/stable/c/bae74771fc5d3b2a9cf6f5aa64596083d032c4a3"},{"url":"https://git.kernel.org/stable/c/3752afcc6d80d5525e236e329895ba2cb93bcb26"},{"url":"https://git.kernel.org/stable/c/23261f0de09427367e99f39f588e31e2856a690e"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:54:22.607Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"5.15.198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.1.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.6.120"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.12.64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.18.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.19"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}