{"id":"CVE-2025-71231","title":"crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode\n\nThe local variable 'i' is initialized with -EINVAL, but the for loop\nimmediately overwrites it…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < c77b33b58512708bd5603f48465f018c8b748847","Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < d75207465eed20bc9b0daa4a0927de9568996067","Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < de16f5bca05cace238d237791ed1b6e9d22dab60","Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < 48329301969f6d21b2ef35f678e40f72b59eac94","Linux 6.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:15:41.870686Z"},"published":"2026-02-18","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:23:11.127Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71231","references":[{"url":"https://git.kernel.org/stable/c/c77b33b58512708bd5603f48465f018c8b748847"},{"url":"https://git.kernel.org/stable/c/d75207465eed20bc9b0daa4a0927de9568996067"},{"url":"https://git.kernel.org/stable/c/de16f5bca05cace238d237791ed1b6e9d22dab60"},{"url":"https://git.kernel.org/stable/c/48329301969f6d21b2ef35f678e40f72b59eac94"}],"tags":["cve.org"],"epss":0.00137,"epssPercentile":0.0313,"ingestedAt":"2026-11-05T22:38:32.063Z","slug":"CVE-2025-71231","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode\n\nThe local variable 'i' is initialized with -EINVAL, but the for loop\nimmediately overwrites it and -EINVAL is never returned.\n\nIf no empty compression mode can be found, the function would return the\nout-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid\narray access in add_iaa_compression_mode().\n\nFix both issues by returning either a valid index or -EINVAL.\n\n## Affected\n\n- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < c77b33b58512708bd5603f48465f018c8b748847`\n- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < d75207465eed20bc9b0daa4a0927de9568996067`\n- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < de16f5bca05cace238d237791ed1b6e9d22dab60`\n- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < 48329301969f6d21b2ef35f678e40f72b59eac94`\n- `Linux 6.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}