---
id: CVE-2025-71191
title: 'dmaengine: at_hdmac: fix device leak on of_dma_xlate()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dmaengine: at_hdmac: fix device leak on of_dma_xlate()

  Make sure to drop the reference taken when looking up the DMA platform
  device during of_dma_xlate() when releasi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    49d964cde422dc66fea514b7ab24aa729df7081d
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    48b2d7f530b83cb149dbf0e48f95ccadb2d90da9
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    987c71671367f42460689b78244d7b894c50999a
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    6a86cf2c09e149d5718a5b7090545f7566da9334
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    f3c23b7e941349505c3d40de2cc0acd93d9ac057
  - >-
    Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 <
    b9074b2d7a230b6e28caa23165e9d8bc0677d333
  - Linux 3.10
published: '2026-01-31'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T08:44:13.143Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71191'
references:
  - url: 'https://git.kernel.org/stable/c/49d964cde422dc66fea514b7ab24aa729df7081d'
  - url: 'https://git.kernel.org/stable/c/4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f'
  - url: 'https://git.kernel.org/stable/c/48b2d7f530b83cb149dbf0e48f95ccadb2d90da9'
  - url: 'https://git.kernel.org/stable/c/987c71671367f42460689b78244d7b894c50999a'
  - url: 'https://git.kernel.org/stable/c/6a86cf2c09e149d5718a5b7090545f7566da9334'
  - url: 'https://git.kernel.org/stable/c/f3c23b7e941349505c3d40de2cc0acd93d9ac057'
  - url: 'https://git.kernel.org/stable/c/b9074b2d7a230b6e28caa23165e9d8bc0677d333'
tags:
  - cve.org
epss: 0.00199
epssPercentile: 0.09997
ingestedAt: '2026-09-08T15:33:26.994Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: at_hdmac: fix device leak on of_dma_xlate()

Make sure to drop the reference taken when looking up the DMA platform
device during of_dma_xlate() when releasing channel resources.

Note that commit 3832b78b3ec2 ("dmaengine: at_hdmac: add missing
put_device() call in at_dma_xlate()") fixed the leak in a couple of
error paths but the reference is still leaking on successful allocation.

## Affected

- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < 49d964cde422dc66fea514b7ab24aa729df7081d`
- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < 4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f`
- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < 48b2d7f530b83cb149dbf0e48f95ccadb2d90da9`
- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < 987c71671367f42460689b78244d7b894c50999a`
- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < 6a86cf2c09e149d5718a5b7090545f7566da9334`
- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < f3c23b7e941349505c3d40de2cc0acd93d9ac057`
- `Linux >= bbe89c8e3d598129b728d1388c3ad9abe4e8e261 < b9074b2d7a230b6e28caa23165e9d8bc0677d333`
- `Linux 3.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.