Vulnerability in Linux
CVE-2025-71270
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE subcode This patch allows the LoongArch BPF JIT to handle recoverable memory access errors generated by BPF_PROBE_MEM* instructions. When a BPF program performs memory access operations, the instructions it executes may trigger ADEM exceptions. The kernel’s built-in BPF exception table mechanism (EX_TYPE_BPF) will generate corresponding exception fixup entries in the JIT compilation phase; however, the architecture-specific trap handling function needs to proactively call the common fixup routine to achieve exception recovery. do_ade(): fix EX_TYPE_BPF memory access exceptions for BPF programs, ensure safe execution. Relevant test cases: illegal address access tests in module_attach and subprogs_extable of selftests/bpf.
EPSS: 0.001 (2.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions dbcd7f5fafea64dbe588c4ec18bc309fde5d1e1c, 6.2, 0
- Linux Linux_kernel — versions 6.19
References
Frequently asked questions
- What is CVE-2025-71270?
- CVE-2025-71270 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-03-18.
- How severe is CVE-2025-71270?
- Medium severity. CVSS v3 base score is 5.5 out of 10.