HOMEVULNERABILITIESCVE-2025-71300
MEDIUM

CVE-2025-71300

Published: May 8, 2026· Updated: May 14, 2026

5.5
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:4.7th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"

This reverts commit 06d22ed6b6635b17551f386b50bb5aaff9b75fbe.

OP-TEE logic in U-Boot automatically injects a reserved-memory

node along with optee firmware node to kernel device tree.

The injection logic is dependent on that there is no manually

defined optee node. Having the node in zynqmp.dtsi effectively

breaks OP-TEE's insertion of the reserved-memory node, causing

memory access violations during runtime.

NVD Source

Technical Analysis

CVE-2025-71300 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.Low
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

Linux1 product
linux kernel
Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://git.kernel.org/stable/c/2a833c730d4e8d1cc10953270ce0f3a156145d81
PATCHhttps://git.kernel.org/stable/c/3983ef126e439900bbf419724a9759863c146660
PATCHhttps://git.kernel.org/stable/c/c197179990124f991fca220d97fac56779a02c6d
PATCHhttps://git.kernel.org/stable/c/eece81eeda10eb42c687399fb5aa69977ae15664

All References (4)

→
https://git.kernel.org/stable/c/2a833c730d4e8d1cc10953270ce0f3a156145d81Patch
→
https://git.kernel.org/stable/c/3983ef126e439900bbf419724a9759863c146660Patch
→
https://git.kernel.org/stable/c/c197179990124f991fca220d97fac56779a02c6dPatch
→
https://git.kernel.org/stable/c/eece81eeda10eb42c687399fb5aa69977ae15664Patch

Quick Facts

CVE IDCVE-2025-71300
CVSS Score5.5 / 10
SeverityMEDIUM
CISA KEVNo
EPSS (30d)0.02%
Affected1 vendor
PublishedMay 8, 2026

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2025-71300 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2025-71300·NVD