CVE-2025-71136

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the adv7842 cp log status() function related to potential out-of-bounds array accesses. The issue arises because the cp read() and hdmi read() functions can return an error (-EIO) which is then used as an index to access arrays, potentially leading to a crash or other unexpected behavior. The fix involves checking the return values of these functions before using them as array indexes. This issue was discovered by the Linux Verification Center (linuxtesting.org) using SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.