CVE-2025-71076
- Source
- https://cve.org/CVERecord?id=CVE-2025-71076
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71076.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-71076
- Downstream
- Related
- Published
- 2026-01-13T15:31:28.759Z
- Modified
- 2026-05-18T05:57:37.966560365Z
- Summary
- drm/xe/oa: Limit num_syncs to prevent oversized allocations
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/oa: Limit num_syncs to prevent oversized allocations
The OA open parameters did not validate num_syncs, allowing userspace to pass arbitrarily large values, potentially leading to excessive allocations.
Add check to ensure that numsyncs does not exceed DRMXEMAXSYNCS, returning -EINVAL when the limit is violated.
v2: use XEIOCTLDBG() and drop duplicated check. (Ashutosh)
(cherry picked from commit e057b2d2b8d815df3858a87dffafa2af37e5945b)
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71076.json" }- References
-
- https://git.kernel.org/stable/c/338849090ee610ff6d11e5e90857d2c27a4121ab
- https://git.kernel.org/stable/c/b963636331fb4f3f598d80492e2fa834757198eb
- https://git.kernel.org/stable/c/f8dd66bfb4e184c71bd26418a00546ebe7f5c17a
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71076.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-71076
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced803d418b73387fda392ddd83eace757ac25cf15dFixedb963636331fb4f3f598d80492e2fa834757198eb
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc8507a25cebd179db935dd266a33c51bef1b1e80Fixed338849090ee610ff6d11e5e90857d2c27a4121abFixedf8dd66bfb4e184c71bd26418a00546ebe7f5c17a
Affected versions
v6.*
v6.12.17
v6.12.18
v6.12.19
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.35
v6.12.36
v6.12.37
v6.12.38
v6.12.39
v6.12.40
v6.12.41
v6.12.42
v6.12.43
v6.12.44
v6.12.45
v6.12.46
v6.12.47
v6.12.48
v6.12.49
v6.12.50
v6.12.51
v6.12.52
v6.12.53
v6.12.54
v6.12.55
v6.12.56
v6.12.57
v6.12.58
v6.12.59
v6.12.60
v6.12.61
v6.12.62
v6.12.63