CVE-2025-71073

CVE-2025-71073 describes a use-after-free vulnerability in the Linux kernel's lkkbd input driver. This flaw occurs when the lkkbd structure is freed before pending reinitialization work is properly canceled, allowing the work handler to access freed memory. While a CVSS score is not available, the potential for a use-after-free suggests a local attack vector with possible denial-of-service or privilege escalation implications. There is no public exploit code, Metasploit module, or evidence of active exploitation, although it has garnered significant community discussion and a security update from openSUSE.