SB2026011420 - Use-after-free in Linux kernel iommu driver
Published: January 14, 2026
Security Bulletin ID
SB2026011420
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use-after-free (CVE-ID: CVE-2025-71071)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the mtk_iommu_mm_dts_parse(), mtk_iommu_probe() and mtk_iommu_remove() functions in drivers/iommu/mtk_iommu.c. A local user can escalate privileges on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1ef70a0b104ae8011811f60bcfaa55ff49385171
- https://git.kernel.org/stable/c/5c04217d06a1161aaf36267e9d971ab6f847d5a7
- https://git.kernel.org/stable/c/896ec55da3b90bdb9fc04fedc17ad8c359b2eee5
- https://git.kernel.org/stable/c/de83d4617f9fe059623e97acf7e1e10d209625b5
- https://git.kernel.org/stable/c/f6c08d3aa441bbc1956e9d65f1cbb89113a5aa8a