---
id: CVE-2025-71186
title: 'dmaengine: stm32: dmamux: fix device leak on route allocation'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dmaengine: stm32: dmamux: fix device leak on route allocation

  Make sure to drop the reference taken when looking up the DMA mux
  platform device during route allocation…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    3b42020e6790a5e19b36c187ed5b488a5716f97f
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    6393da54dcb3488c080a183c4182ddec71ba8d7f
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    1dda2a32303df0091896b01a9d09070d61fa344c
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    1a179ac01ff3993ab97e33cc77c316ed7415cda1
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    2fb10259d4efb4367787b5ae9c94192e8a91c648
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    3ef52d31cce8ba816739085a61efe07b63c6cf27
  - >-
    Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 <
    dd6e4943889fb354efa3f700e42739da9bddb6ef
  - Linux 4.15
published: '2026-01-31'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T08:44:08.983Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71186'
references:
  - url: 'https://git.kernel.org/stable/c/3b42020e6790a5e19b36c187ed5b488a5716f97f'
  - url: 'https://git.kernel.org/stable/c/6393da54dcb3488c080a183c4182ddec71ba8d7f'
  - url: 'https://git.kernel.org/stable/c/1dda2a32303df0091896b01a9d09070d61fa344c'
  - url: 'https://git.kernel.org/stable/c/1a179ac01ff3993ab97e33cc77c316ed7415cda1'
  - url: 'https://git.kernel.org/stable/c/2fb10259d4efb4367787b5ae9c94192e8a91c648'
  - url: 'https://git.kernel.org/stable/c/3ef52d31cce8ba816739085a61efe07b63c6cf27'
  - url: 'https://git.kernel.org/stable/c/dd6e4943889fb354efa3f700e42739da9bddb6ef'
tags:
  - cve.org
epss: 0.00199
epssPercentile: 0.08734
ingestedAt: '2026-09-08T15:33:26.994Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: stm32: dmamux: fix device leak on route allocation

Make sure to drop the reference taken when looking up the DMA mux
platform device during route allocation.

Note that holding a reference to a device does not prevent its driver
data from going away so there is no point in keeping the reference.

## Affected

- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < 3b42020e6790a5e19b36c187ed5b488a5716f97f`
- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < 6393da54dcb3488c080a183c4182ddec71ba8d7f`
- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < 1dda2a32303df0091896b01a9d09070d61fa344c`
- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < 1a179ac01ff3993ab97e33cc77c316ed7415cda1`
- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < 2fb10259d4efb4367787b5ae9c94192e8a91c648`
- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < 3ef52d31cce8ba816739085a61efe07b63c6cf27`
- `Linux >= df7e762db5f6c8dbd9e480f1c9ef9851de346657 < dd6e4943889fb354efa3f700e42739da9bddb6ef`
- `Linux 4.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.