Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-71145

In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case. Increment the reference count also for non-OF so that the caller can decrement it unconditionally. Note that this is inherently racy just
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f1846a6c09f9053bbdf483cab96b6da12391d243c20198ef96b95acd92acf8c6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/phy/phy-isp1301.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"43e58abad6c08c5f0943594126ef4cd6559aac0b","status":"affected","version":"0c2b0e747010fa645342138d71339a0ecb823bb0","versionType":"git"},{"lessThan":"03bbdaa4da8c6ea0c8431a5011db188a07822c8a","status":"affected","version":"33c2e2a87313bc1afe9f7febbbb2014c431a2c5d","versionType":"git"},{"lessThan":"75c5d9bce072abbbc09b701a49869ac23c34a906","status":"affected","version":"8481323710062051…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/phy/phy-isp1301.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/phy/phy-isp1301.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"43e58abad6c08c5f0943594126ef4cd6559aac0b","status":"affected","version":"0c2b0e747010fa645342138d71339a0ecb823bb0","versionType":"git"},{"lessThan":"03bbdaa4da8c6ea0c8431a5011db188a07822c8a","status":"affected","version":"33c2e2a87313bc1afe9f7febbbb2014c431a2c5d","versionType":"git"},{"lessThan":"75c5d9bce072abbbc09b701a49869ac23c34a906","status":"affected","version":"8481323710062051…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/phy/phy-isp1301.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/03bbdaa4da8c6ea0c8431a5011db188a07822c8a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/43e58abad6c08c5f0943594126ef4cd6559aac0b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5d3df03f70547d4e3fc10ed4381c052eff51b157"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/7501ecfe3e5202490c2d13dc7e181203601fcd69"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/75c5d9bce072abbbc09b701a49869ac23c34a906"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b4b64fda4d30a83a7f00e92a0c8a1d47699609f3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:33abe879930c2cb734dd832fb444f23ce150267c2752d0cab16e57e973fccdd1 · sha256:67a0b1d73af72dfe… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer