---
id: CVE-2025-71231
title: 'crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

  The local variable 'i' is initialized with -EINVAL, but the for loop
  immediately overwrites it…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b190447e0fa3ef7355480d641d078962e03768b4 <
    c77b33b58512708bd5603f48465f018c8b748847
  - >-
    Linux >= b190447e0fa3ef7355480d641d078962e03768b4 <
    d75207465eed20bc9b0daa4a0927de9568996067
  - >-
    Linux >= b190447e0fa3ef7355480d641d078962e03768b4 <
    de16f5bca05cace238d237791ed1b6e9d22dab60
  - >-
    Linux >= b190447e0fa3ef7355480d641d078962e03768b4 <
    48329301969f6d21b2ef35f678e40f72b59eac94
  - Linux 6.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:15:41.870686Z'
published: '2026-02-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:11.127Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71231'
references:
  - url: 'https://git.kernel.org/stable/c/c77b33b58512708bd5603f48465f018c8b748847'
  - url: 'https://git.kernel.org/stable/c/d75207465eed20bc9b0daa4a0927de9568996067'
  - url: 'https://git.kernel.org/stable/c/de16f5bca05cace238d237791ed1b6e9d22dab60'
  - url: 'https://git.kernel.org/stable/c/48329301969f6d21b2ef35f678e40f72b59eac94'
tags:
  - cve.org
epss: 0.00137
epssPercentile: 0.0313
ingestedAt: '2026-11-05T22:38:32.063Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop
immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the
out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid
array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

## Affected

- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < c77b33b58512708bd5603f48465f018c8b748847`
- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < d75207465eed20bc9b0daa4a0927de9568996067`
- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < de16f5bca05cace238d237791ed1b6e9d22dab60`
- `Linux >= b190447e0fa3ef7355480d641d078962e03768b4 < 48329301969f6d21b2ef35f678e40f72b59eac94`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.