VULNERABILITY INTELLIGENCE

CVE-2025-71136

CVSS score7.1 HIGH
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-01-14
Last modified2026-07-30
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's possible for cp_read() and hdmi_read() to return -EIO. Those values are further used as indexes for accessing arrays. Fix that by checking return values where it's needed. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Weakness classification

  • nvd@nist.gov: CWE-125

Primary references