CVE-2025-71287: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leak on larb probe Make sure to drop the reference taken when looking up the SMI device during larb probe on late probe failure (e.g. probe deferral) and on driver unbind.

Affected products

• Linux Linux Kernel: from 4.6, before 5.15.203 (fixed in 5.15.203); from 5.16, before 6.1.167 (fixed in 6.1.167); from 6.2, before 6.6.130 (fixed in 6.6.130); from 6.7, before 6.12.77 (fixed in 6.12.77); from 6.13, before 6.18.17 (fixed in 6.18.17); from 6.19, before 6.19.6 (fixed in 6.19.6)

Published 2026-05-06. Last modified 2026-06-17.