CVE-2025-71081

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: sai: fix OF node leak on probe

The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the set_sync() callback fails during DAI probe.

Make sure to drop the reference on platform probe failures (e.g. probe deferral) and on driver unbind.

This also avoids a potential use-after-free in case the DAI is ever reprobed without first rebinding the platform driver.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5914d285f6b782892a91d6621723fdc41a775b15 < 7daa50a2157e41c964b745ab1dc378b5b3b626d1affected
LinuxLinux5914d285f6b782892a91d6621723fdc41a775b15 < acda653169e180b1d860dbb6bc5aceb105858394affected
LinuxLinux5914d285f6b782892a91d6621723fdc41a775b15 < 4054a3597d047f3fe87864ef87f399b5d523e6c0affected
LinuxLinux5914d285f6b782892a91d6621723fdc41a775b15 < bae74771fc5d3b2a9cf6f5aa64596083d032c4a3affected
LinuxLinux5914d285f6b782892a91d6621723fdc41a775b15 < 3752afcc6d80d5525e236e329895ba2cb93bcb26affected
LinuxLinux5914d285f6b782892a91d6621723fdc41a775b15 < 23261f0de09427367e99f39f588e31e2856a690eaffected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux5.15.198 <= 5.15.*unaffected
LinuxLinux6.1.160 <= 6.1.*unaffected
LinuxLinux6.6.120 <= 6.6.*unaffected
LinuxLinux6.12.64 <= 6.12.*unaffected
LinuxLinux6.18.4 <= 6.18.*unaffected
LinuxLinux6.19 <= *unaffected

Weaknesses

References