CVE-2025-71136
Published: 14 January 2026
Summary
CVE-2025-71136 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Linux Linux Kernel. Its CVSS base score is 7.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 4.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense at a Glance
Threat & Defense Details
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Kernel OOB read in adv7842 driver directly enables local exploitation for privilege escalation (T1068), credential access via kernel memory disclosure (T1212), and system DoS via crash (T1499.004).
NVD Description
In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's possible for cp_read() and hdmi_read() to return -EIO. Those values are further used as indexes for accessing arrays. Fix that…
more
by checking return values where it's needed. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Deeper analysisAI
CVE-2025-71136 is a vulnerability in the Linux kernel's media subsystem, specifically the adv7842 driver. The issue occurs in the adv7842_cp_log_status() function, where return values from cp_read() and hdmi_read()—which can be -EIO—are used directly as indexes for array accesses without prior validation, potentially leading to out-of-bounds reads. This flaw, classified under CWE-125 (Out-of-bounds Read), was identified by the Linux Verification Center using SVACE static analysis and carries a CVSS v3.1 base score of 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).
A local attacker with low privileges can exploit this vulnerability with low complexity and no user interaction required. Successful exploitation enables high-impact confidentiality violations, such as unauthorized access to sensitive kernel memory, and high-impact availability disruptions, potentially including system crashes or denial of service.
Mitigation involves applying the relevant stable kernel patches, as detailed in the upstream commit references: https://git.kernel.org/stable/c/60dde0960e3ead8a9569f6c494d90d0232ac0983, https://git.kernel.org/stable/c/8163419e3e05d71dcfa8fb49c8fdf8d76908fe51, https://git.kernel.org/stable/c/a73881ae085db5702d8b13e2fc9f78d51c723d3f, https://git.kernel.org/stable/c/b693d48a6ed0cd09171103ad418e4a693203d6e4, and https://git.kernel.org/stable/c/d6a22a4a96e4dfe6897cb3532d2b3016d87706f0. These commits add return value checks before array indexing to prevent the out-of-bounds accesses.
Details
- CWE(s)