CVE-2025-71071 is a use-after-free vulnerability in the MediaTek IOMMU driver within the Linux kernel. This flaw occurs when the driver prematurely drops references to "larb" devices during probe deferral, potentially leading to memory corruption. While no CVSS score is available, its FAUCET Risk Score is 39/100, indicating a moderate risk. There is no evidence of active exploitation, public exploit code, or inclusion in the CISA KEV catalog, though it has garnered significant community discussion with 10 mentions.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.0.16, < 6.1CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.1.2, < 6.1.160CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.0.16, < 6.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.1.2, < 6.1.160CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2.1, < 6.6.120CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (NVIDIA Tegra) vulnerabilities
May 11, 2026Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026Linux kernel vulnerabilities
May 7, 2026Linux kernel (GCP) vulnerabilities
May 7, 2026Linux kernel (Low Latency NVIDIA) vulnerabilities
Apr 28, 2026Linux kernel (Raspberry Pi Real-time) vulnerabilities
Apr 23, 2026Linux kernel (Oracle) vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026Linux kernel (FIPS) vulnerabilities
Apr 17, 2026Linux kernel (Real-time) vulnerabilities
Apr 17, 2026Linux kernel (GCP) vulnerabilities
Apr 17, 2026Linux kernel vulnerabilities
Apr 16, 2026Linux kernel vulnerabilities
Apr 16, 2026kernel: iommu/mediatek: fix use-after-free on probe deferral
Jan 13, 2026