GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-71142 (GCVE-0-2025-71142)

Vulnerability from cvelistv5 – Published: 2026-01-14 15:07 – Updated: 2026-09-14 11:58
VLAI
Title
cpuset: fix warning when disabling remote partition
Summary
In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110 RIP: 0010:remote_partition_disable+0xf7/0x110 RSP: 0018:ffffc90001947d88 EFLAGS: 00000206 RAX: 0000000000007fff RBX: ffff888103b6e000 RCX: 0000000000006f40 RDX: 0000000000006f00 RSI: ffffc90001947da8 RDI: ffff888103b6e000 RBP: ffff888103b6e000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: ffff88810b2e2728 R12: ffffc90001947da8 R13: 0000000000000000 R14: ffffc90001947da8 R15: ffff8881081f1c00 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f55c8bbe0b2 CR3: 000000010b14c000 CR4: 00000000000006f0 Call Trace: <TASK> update_prstate+0x2d3/0x580 cpuset_partition_write+0x94/0xf0 kernfs_fop_write_iter+0x147/0x200 vfs_write+0x35d/0x500 ksys_write+0x66/0xe0 do_syscall_64+0x6b/0x390 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7f55c8cd4887 Reproduction steps (on a 16-CPU machine): # cd /sys/fs/cgroup/ # mkdir A1 # echo +cpuset > A1/cgroup.subtree_control # echo "0-14" > A1/cpuset.cpus.exclusive # mkdir A1/A2 # echo "0-14" > A1/A2/cpuset.cpus.exclusive # echo "root" > A1/A2/cpuset.cpus.partition # echo 0 > /sys/devices/system/cpu/cpu15/online # echo member > A1/A2/cpuset.cpus.partition When CPU 15 is offlined, subpartitions_cpus gets cleared because no CPUs remain available for the top_cpuset, forcing partitions to share CPUs with the top_cpuset. In this scenario, disabling the remote partition triggers a warning stating that effective_xcpus is not a subset of subpartitions_cpus. Partitions should be invalidated in this case to inform users that the partition is now invalid(cpus are shared with top_cpuset). To fix this issue: 1. Only emit the warning only if subpartitions_cpus is not empty and the effective_xcpus is not a subset of subpartitions_cpus. 2. During the CPU hotplug process, invalidate partitions if subpartitions_cpus is empty.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 93f045741dac64facf90c2216f9a1d0876d122c4 , < 71953da7c979983917a4597bcad2c1ea6b8cc226 (git)
Affected: f62a5d39368e34a966c8df63e1f05eed7fe9c5de , < 5d8b9d38a7676be7bb5e7d57f92156a98dab39fb (git)
Affected: f62a5d39368e34a966c8df63e1f05eed7fe9c5de , < aa7d3a56a20f07978d9f401e13637a6479b13bd0 (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.15
Unaffected: 0 , < 6.15 (semver)
Unaffected: 6.18.4 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/cgroup/cpuset.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "71953da7c979983917a4597bcad2c1ea6b8cc226",
              "status": "affected",
              "version": "93f045741dac64facf90c2216f9a1d0876d122c4",
              "versionType": "git"
            },
            {
              "lessThan": "5d8b9d38a7676be7bb5e7d57f92156a98dab39fb",
              "status": "affected",
              "version": "f62a5d39368e34a966c8df63e1f05eed7fe9c5de",
              "versionType": "git"
            },
            {
              "lessThan": "aa7d3a56a20f07978d9f401e13637a6479b13bd0",
              "status": "affected",
              "version": "f62a5d39368e34a966c8df63e1f05eed7fe9c5de",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/cgroup/cpuset.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.4",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpuset: fix warning when disabling remote partition\n\nA warning was triggered as follows:\n\nWARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110\nRIP: 0010:remote_partition_disable+0xf7/0x110\nRSP: 0018:ffffc90001947d88 EFLAGS: 00000206\nRAX: 0000000000007fff RBX: ffff888103b6e000 RCX: 0000000000006f40\nRDX: 0000000000006f00 RSI: ffffc90001947da8 RDI: ffff888103b6e000\nRBP: ffff888103b6e000 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000001 R11: ffff88810b2e2728 R12: ffffc90001947da8\nR13: 0000000000000000 R14: ffffc90001947da8 R15: ffff8881081f1c00\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f55c8bbe0b2 CR3: 000000010b14c000 CR4: 00000000000006f0\nCall Trace:\n \u003cTASK\u003e\n update_prstate+0x2d3/0x580\n cpuset_partition_write+0x94/0xf0\n kernfs_fop_write_iter+0x147/0x200\n vfs_write+0x35d/0x500\n ksys_write+0x66/0xe0\n do_syscall_64+0x6b/0x390\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\nRIP: 0033:0x7f55c8cd4887\n\nReproduction steps (on a 16-CPU machine):\n\n        # cd /sys/fs/cgroup/\n        # mkdir A1\n        # echo +cpuset \u003e A1/cgroup.subtree_control\n        # echo \"0-14\" \u003e A1/cpuset.cpus.exclusive\n        # mkdir A1/A2\n        # echo \"0-14\" \u003e A1/A2/cpuset.cpus.exclusive\n        # echo \"root\" \u003e A1/A2/cpuset.cpus.partition\n        # echo 0 \u003e /sys/devices/system/cpu/cpu15/online\n        # echo member \u003e A1/A2/cpuset.cpus.partition\n\nWhen CPU 15 is offlined, subpartitions_cpus gets cleared because no CPUs\nremain available for the top_cpuset, forcing partitions to share CPUs with\nthe top_cpuset. In this scenario, disabling the remote partition triggers\na warning stating that effective_xcpus is not a subset of\nsubpartitions_cpus. Partitions should be invalidated in this case to\ninform users that the partition is now invalid(cpus are shared with\ntop_cpuset).\n\nTo fix this issue:\n1. Only emit the warning only if subpartitions_cpus is not empty and the\n   effective_xcpus is not a subset of subpartitions_cpus.\n2. During the CPU hotplug process, invalidate partitions if\n   subpartitions_cpus is empty."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T11:58:09.697Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/71953da7c979983917a4597bcad2c1ea6b8cc226"
        },
        {
          "url": "https://git.kernel.org/stable/c/5d8b9d38a7676be7bb5e7d57f92156a98dab39fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/aa7d3a56a20f07978d9f401e13637a6479b13bd0"
        }
      ],
      "title": "cpuset: fix warning when disabling remote partition",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-71142",
    "datePublished": "2026-01-14T15:07:55.145Z",
    "dateReserved": "2026-01-13T15:30:19.661Z",
    "dateUpdated": "2026-09-14T11:58:09.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-71142",
      "date": "2026-09-17",
      "epss": "0.00132",
      "percentile": "0.03118"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-71142\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-01-14T15:16:04.010\",\"lastModified\":\"2026-09-14T12:17:37.650\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncpuset: fix warning when disabling remote partition\\n\\nA warning was triggered as follows:\\n\\nWARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110\\nRIP: 0010:remote_partition_disable+0xf7/0x110\\nRSP: 0018:ffffc90001947d88 EFLAGS: 00000206\\nRAX: 0000000000007fff RBX: ffff888103b6e000 RCX: 0000000000006f40\\nRDX: 0000000000006f00 RSI: ffffc90001947da8 RDI: ffff888103b6e000\\nRBP: ffff888103b6e000 R08: 0000000000000000 R09: 0000000000000000\\nR10: 0000000000000001 R11: ffff88810b2e2728 R12: ffffc90001947da8\\nR13: 0000000000000000 R14: ffffc90001947da8 R15: ffff8881081f1c00\\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\nCR2: 00007f55c8bbe0b2 CR3: 000000010b14c000 CR4: 00000000000006f0\\nCall Trace:\\n \u003cTASK\u003e\\n update_prstate+0x2d3/0x580\\n cpuset_partition_write+0x94/0xf0\\n kernfs_fop_write_iter+0x147/0x200\\n vfs_write+0x35d/0x500\\n ksys_write+0x66/0xe0\\n do_syscall_64+0x6b/0x390\\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\\nRIP: 0033:0x7f55c8cd4887\\n\\nReproduction steps (on a 16-CPU machine):\\n\\n        # cd /sys/fs/cgroup/\\n        # mkdir A1\\n        # echo +cpuset \u003e A1/cgroup.subtree_control\\n        # echo \\\"0-14\\\" \u003e A1/cpuset.cpus.exclusive\\n        # mkdir A1/A2\\n        # echo \\\"0-14\\\" \u003e A1/A2/cpuset.cpus.exclusive\\n        # echo \\\"root\\\" \u003e A1/A2/cpuset.cpus.partition\\n        # echo 0 \u003e /sys/devices/system/cpu/cpu15/online\\n        # echo member \u003e A1/A2/cpuset.cpus.partition\\n\\nWhen CPU 15 is offlined, subpartitions_cpus gets cleared because no CPUs\\nremain available for the top_cpuset, forcing partitions to share CPUs with\\nthe top_cpuset. In this scenario, disabling the remote partition triggers\\na warning stating that effective_xcpus is not a subset of\\nsubpartitions_cpus. Partitions should be invalidated in this case to\\ninform users that the partition is now invalid(cpus are shared with\\ntop_cpuset).\\n\\nTo fix this issue:\\n1. Only emit the warning only if subpartitions_cpus is not empty and the\\n   effective_xcpus is not a subset of subpartitions_cpus.\\n2. During the CPU hotplug process, invalidate partitions if\\n   subpartitions_cpus is empty.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\ncpuset: solucionar advertencia al deshabilitar la partici\u00f3n remota\\n\\nSe activ\u00f3 una advertencia de la siguiente manera:\\n\\nWARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110\\nRIP: 0010:remote_partition_disable+0xf7/0x110\\nRSP: 0018:ffffc90001947d88 EFLAGS: 00000206\\nRAX: 0000000000007fff RBX: ffff888103b6e000 RCX: 0000000000006f40\\nRDX: 0000000000006f00 RSI: ffffc90001947da8 RDI: ffff888103b6e000\\nRBP: ffff888103b6e000 R08: 0000000000000000 R09: 0000000000000000\\nR10: 0000000000000001 R11: ffff88810b2e2728 R12: ffffc90001947da8\\nR13: 0000000000000000 R14: ffffc90001947da8 R15: ffff8881081f1c00\\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\nCR2: 00007f55c8bbe0b2 CR3: 000000010b14c000 CR4: 00000000000006f0\\nRastro de Llamada:\\n \\n update_prstate+0x2d3/0x580\\n cpuset_partition_write+0x94/0xf0\\n kernfs_fop_write_iter+0x147/0x200\\n vfs_write+0x35d/0x500\\n ksys_write+0x66/0xe0\\n do_syscall_64+0x6b/0x390\\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\\nRIP: 0033:0x7f55c8cd4887\\n\\nPasos de reproducci\u00f3n (en una m\u00e1quina de 16 CPU):\\n\\n        # cd /sys/fs/cgroup/\\n        # mkdir A1\\n        # echo +cpuset \u0026gt; A1/cgroup.subtree_control\\n        # echo \\\"0-14\\\" \u0026gt; A1/cpuset.cpus.exclusive\\n        # mkdir A1/A2\\n        # echo \\\"0-14\\\" \u0026gt; A1/A2/cpuset.cpus.exclusive\\n        # echo \\\"root\\\" \u0026gt; A1/A2/cpuset.cpus.partition\\n        # echo 0 \u0026gt; /sys/devices/system/cpu/cpu15/online\\n        # echo member \u0026gt; A1/A2/cpuset.cpus.partition\\n\\nCuando la CPU 15 se pone fuera de l\u00ednea, subpartitions_cpus se borra porque no quedan CPU disponibles para el top_cpuset, forzando a las particiones a compartir CPU con el top_cpuset. En este escenario, deshabilitar la partici\u00f3n remota activa una advertencia indicando que effective_xcpus no es un subconjunto de subpartitions_cpus. Las particiones deber\u00edan ser invalidadas en este caso para informar a los usuarios que la partici\u00f3n ahora es inv\u00e1lida (las CPU se comparten con top_cpuset).\\n\\nPara solucionar este problema:\\n1. Solo emitir la advertencia si subpartitions_cpus no est\u00e1 vac\u00edo y effective_xcpus no es un subconjunto de subpartitions_cpus.\\n2. Durante el proceso de hotplug de CPU, invalidar las particiones si subpartitions_cpus est\u00e1 vac\u00edo.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"kernel/cgroup/cpuset.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"93f045741dac64facf90c2216f9a1d0876d122c4\",\"lessThan\":\"71953da7c979983917a4597bcad2c1ea6b8cc226\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f62a5d39368e34a966c8df63e1f05eed7fe9c5de\",\"lessThan\":\"5d8b9d38a7676be7bb5e7d57f92156a98dab39fb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f62a5d39368e34a966c8df63e1f05eed7fe9c5de\",\"lessThan\":\"aa7d3a56a20f07978d9f401e13637a6479b13bd0\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"kernel/cgroup/cpuset.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.15\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.15\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.4\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.15.1\",\"versionEndExcluding\":\"6.18.4\",\"matchCriteriaId\":\"DD0A1B05-C008-4639-A2E7-32E5D447EA98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1ECC65A-EE37-4479-8E99-4BB68A22A31F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"17B67AA7-40D6-4AFA-8459-F200F3D7CFD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C47E4CC9-C826-4FA9-B014-7FE3D9B318B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F71D92C0-C023-48BD-B3B6-70B638EEE298\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"13580667-0A98-40CC-B29F-D12790B91BDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF854A1-ABB1-4E93-BE9A-44569EC76C0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB5B7DFC-C36B-45D8-922C-877569FDDF43\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/5d8b9d38a7676be7bb5e7d57f92156a98dab39fb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/71953da7c979983917a4597bcad2c1ea6b8cc226\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/aa7d3a56a20f07978d9f401e13637a6479b13bd0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-28T07:12:47+00:00",
      "cve": "CVE-2025-71142",
      "id": "CVE-2025-71142",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: cpuset: fix warning when disabling remote partition",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-71142.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T02:17:51Z",
      "cve": "CVE-2025-71142",
      "id": "CVE-2025-71142",
      "initial_release_date": "2026-01-16T00:26:00Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "399",
      "product_status:known_not_affected": "371",
      "product_status:recommended": "265",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-71142",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-71142.json",
      "version": "28"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.