CVE-2025-71101 (GCVE-0-2025-71101)

Vulnerability from cvelistv5 – Published: 2026-01-13 15:34 – Updated: 2026-08-05 12:12
VLAI
Title
platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
Summary
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hp_populate_*_elements_from_package() functions in the hp-bioscfg driver contain out-of-bounds array access vulnerabilities. These functions parse ACPI packages into internal data structures using a for loop with index variable 'elem' that iterates through enum_obj/integer_obj/order_obj/password_obj/string_obj arrays. When processing multi-element fields like PREREQUISITES and ENUM_POSSIBLE_VALUES, these functions read multiple consecutive array elements using expressions like 'enum_obj[elem + reqs]' and 'enum_obj[elem + pos_values]' within nested loops. The bug is that the bounds check only validated elem, but did not consider the additional offset when accessing elem + reqs or elem + pos_values. The fix changes the bounds check to validate the actual accessed index.
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: e6c7b3e15559699a30646dd45195549c7db447bd , < cf7ae870560b988247a4bbbe5399edd326632680 (git)
Affected: e6c7b3e15559699a30646dd45195549c7db447bd , < db4c26adf7117b1a4431d1197ae7109fee3230ad (git)
Affected: e6c7b3e15559699a30646dd45195549c7db447bd , < 79cab730dbaaac03b946c7f5681bd08c986e2abd (git)
Affected: e6c7b3e15559699a30646dd45195549c7db447bd , < e44c42c830b7ab36e3a3a86321c619f24def5206 (git)
Create a notification for this product.
Linux Linux Affected: 6.6
Unaffected: 0 , < 6.6 (semver)
Unaffected: 6.6.120 , ≤ 6.6.* (semver)
Unaffected: 6.12.64 , ≤ 6.12.* (semver)
Unaffected: 6.18.4 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/hp/hp-bioscfg/enum-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/int-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/order-list-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/passwdobj-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/string-attributes.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cf7ae870560b988247a4bbbe5399edd326632680",
              "status": "affected",
              "version": "e6c7b3e15559699a30646dd45195549c7db447bd",
              "versionType": "git"
            },
            {
              "lessThan": "db4c26adf7117b1a4431d1197ae7109fee3230ad",
              "status": "affected",
              "version": "e6c7b3e15559699a30646dd45195549c7db447bd",
              "versionType": "git"
            },
            {
              "lessThan": "79cab730dbaaac03b946c7f5681bd08c986e2abd",
              "status": "affected",
              "version": "e6c7b3e15559699a30646dd45195549c7db447bd",
              "versionType": "git"
            },
            {
              "lessThan": "e44c42c830b7ab36e3a3a86321c619f24def5206",
              "status": "affected",
              "version": "e6c7b3e15559699a30646dd45195549c7db447bd",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/hp/hp-bioscfg/enum-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/int-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/order-list-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/passwdobj-attributes.c",
            "drivers/platform/x86/hp/hp-bioscfg/string-attributes.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.6"
            },
            {
              "lessThan": "6.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.120",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.64",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.4",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing\n\nThe hp_populate_*_elements_from_package() functions in the hp-bioscfg\ndriver contain out-of-bounds array access vulnerabilities.\n\nThese functions parse ACPI packages into internal data structures using\na for loop with index variable \u0027elem\u0027 that iterates through\nenum_obj/integer_obj/order_obj/password_obj/string_obj arrays.\n\nWhen processing multi-element fields like PREREQUISITES and\nENUM_POSSIBLE_VALUES, these functions read multiple consecutive array\nelements using expressions like \u0027enum_obj[elem + reqs]\u0027 and\n\u0027enum_obj[elem + pos_values]\u0027 within nested loops.\n\nThe bug is that the bounds check only validated elem, but did not consider\nthe additional offset when accessing elem + reqs or elem + pos_values.\n\nThe fix changes the bounds check to validate the actual accessed index."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable ACPI/WMI package parsing occurs during local hp-bioscfg initialization, with any resulting disclosure consumed through local sysfs attributes. There is no network, adjacent-radio, or peripheral protocol path.\nAC:L - An inconsistent package count deterministically causes the nested loops to exceed the ACPI element array. No race or condition outside the triggering package and driver configuration is required.\nPR:L - Once hp-bioscfg is initialized, an ordinary local user can read the world-readable sysfs metadata into which enumeration values are copied. No capability, authentication, or user-namespace privilege gate protects that disclosure path.\nUI:N - The driver parses the packages during built-in or module initialization, and exploitation does not require another user to open a file or perform a specific action.\nS:U - The vulnerable parser and the affected kernel memory and availability remain under the same kernel security authority. This is not a guest-to-host escape or another security-boundary crossing.\nC:H - The out-of-bounds descriptors are interpreted as string length and pointer fields, allowing unintended kernel memory to be read and potentially copied into readable enumeration metadata. The read is not strictly bounded to a few bytes.\nI:N - The flaw performs out-of-bounds reads, while parsed results are written through bounded copies into fixed internal arrays. No arbitrary write or control-flow corruption primitive is present.\nA:H - A synthetic or invalid out-of-bounds string pointer can be dereferenced by hp_convert_hexstr_to_str(), causing a kernel fault, oops, or panic during driver initialization."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:12:06.814Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cf7ae870560b988247a4bbbe5399edd326632680"
        },
        {
          "url": "https://git.kernel.org/stable/c/db4c26adf7117b1a4431d1197ae7109fee3230ad"
        },
        {
          "url": "https://git.kernel.org/stable/c/79cab730dbaaac03b946c7f5681bd08c986e2abd"
        },
        {
          "url": "https://git.kernel.org/stable/c/e44c42c830b7ab36e3a3a86321c619f24def5206"
        }
      ],
      "title": "platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-71101",
    "datePublished": "2026-01-13T15:34:59.717Z",
    "dateReserved": "2026-01-13T15:30:19.651Z",
    "dateUpdated": "2026-08-05T12:12:06.814Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-71101",
      "date": "2026-08-09",
      "epss": "0.00117",
      "percentile": "0.019"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-21T04:25:15.000Z",
      "cve": "CVE-2025-71101",
      "id": "msrc_CVE-2025-71101",
      "initial_release_date": "2026-01-02T00:00:00.000Z",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2025-71101.json",
      "version": "4"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-71101\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-01-13T16:16:10.030\",\"lastModified\":\"2026-07-30T06:24:51.300\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nplatform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing\\n\\nThe hp_populate_*_elements_from_package() functions in the hp-bioscfg\\ndriver contain out-of-bounds array access vulnerabilities.\\n\\nThese functions parse ACPI packages into internal data structures using\\na for loop with index variable \u0027elem\u0027 that iterates through\\nenum_obj/integer_obj/order_obj/password_obj/string_obj arrays.\\n\\nWhen processing multi-element fields like PREREQUISITES and\\nENUM_POSSIBLE_VALUES, these functions read multiple consecutive array\\nelements using expressions like \u0027enum_obj[elem + reqs]\u0027 and\\n\u0027enum_obj[elem + pos_values]\u0027 within nested loops.\\n\\nThe bug is that the bounds check only validated elem, but did not consider\\nthe additional offset when accessing elem + reqs or elem + pos_values.\\n\\nThe fix changes the bounds check to validate the actual accessed index.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nplatform/x86: hp-bioscfg: Correcci\u00f3n de acceso a array fuera de l\u00edmites en el an\u00e1lisis de paquetes ACPI\\n\\nLas funciones hp_populate_*_elements_from_package() en el controlador hp-bioscfg contienen vulnerabilidades de acceso a array fuera de l\u00edmites.\\n\\nEstas funciones analizan paquetes ACPI en estructuras de datos internas utilizando un bucle for con la variable de \u00edndice \u0027elem\u0027 que itera a trav\u00e9s de arrays enum_obj/integer_obj/order_obj/password_obj/string_obj.\\n\\nAl procesar campos de m\u00faltiples elementos como PREREQUISITES y ENUM_POSSIBLE_VALUES, estas funciones leen m\u00faltiples elementos de array consecutivos utilizando expresiones como \u0027enum_obj[elem + reqs]\u0027 y \u0027enum_obj[elem + pos_values]\u0027 dentro de bucles anidados.\\n\\nEl error es que la comprobaci\u00f3n de l\u00edmites solo validaba elem, pero no consideraba el desplazamiento adicional al acceder a elem + reqs o elem + pos_values.\\n\\nLa correcci\u00f3n cambia la comprobaci\u00f3n de l\u00edmites para validar el \u00edndice real accedido.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/platform/x86/hp/hp-bioscfg/enum-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/int-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/order-list-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/passwdobj-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/string-attributes.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e6c7b3e15559699a30646dd45195549c7db447bd\",\"lessThan\":\"cf7ae870560b988247a4bbbe5399edd326632680\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e6c7b3e15559699a30646dd45195549c7db447bd\",\"lessThan\":\"db4c26adf7117b1a4431d1197ae7109fee3230ad\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e6c7b3e15559699a30646dd45195549c7db447bd\",\"lessThan\":\"79cab730dbaaac03b946c7f5681bd08c986e2abd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e6c7b3e15559699a30646dd45195549c7db447bd\",\"lessThan\":\"e44c42c830b7ab36e3a3a86321c619f24def5206\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/platform/x86/hp/hp-bioscfg/enum-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/int-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/order-list-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/passwdobj-attributes.c\",\"drivers/platform/x86/hp/hp-bioscfg/string-attributes.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.120\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.64\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.4\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.1\",\"versionEndExcluding\":\"6.6.120\",\"matchCriteriaId\":\"C5F84D90-D922-47D3-B042-99569840DD8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.64\",\"matchCriteriaId\":\"32BF4A52-377C-44ED-B5E6-7EA5D896E98B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.4\",\"matchCriteriaId\":\"DC988EA0-0E32-457A-BF95-89BEB31A227B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"E346B162-D566-4E62-ABDE-ECBFB21B8BFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"17B67AA7-40D6-4AFA-8459-F200F3D7CFD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C47E4CC9-C826-4FA9-B014-7FE3D9B318B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F71D92C0-C023-48BD-B3B6-70B638EEE298\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"13580667-0A98-40CC-B29F-D12790B91BDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF854A1-ABB1-4E93-BE9A-44569EC76C0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB5B7DFC-C36B-45D8-922C-877569FDDF43\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/79cab730dbaaac03b946c7f5681bd08c986e2abd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cf7ae870560b988247a4bbbe5399edd326632680\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/db4c26adf7117b1a4431d1197ae7109fee3230ad\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e44c42c830b7ab36e3a3a86321c619f24def5206\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T10:59:25+00:00",
      "cve": "CVE-2025-71101",
      "id": "CVE-2025-71101",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-71101.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-15T05:45:19Z",
      "cve": "CVE-2025-71101",
      "id": "CVE-2025-71101",
      "initial_release_date": "2026-01-14T00:25:19Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "394",
      "product_status:known_not_affected": "260",
      "product_status:recommended": "256",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-71101",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-71101.json",
      "version": "25"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.