CVE-2025-71157

High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a reference using ib_device_get_by_index() before calling ib_del_sub_device_and_put(), we need to drop that reference before returning -EOPNOTSUPP error.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux Kernel
PublishedJan 23, 2026
First seenJan 23, 2026

How to fix

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.11 ≤ v < 6.12.64, 6.13 ≤ v < 6.18.4, 6.196.12.64, 6.18.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-71157 · Linux Kernel · Dark Radar