CVE-2025-71073 Input: lkkbd - disable pending work before freeing device
A use-after-free vulnerability in the Linux kernel lkkbd driver allows attackers to execute arbitrary code or escalate privileges via race conditions during device disconnection.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-71073?
CVE-2025-71073 is a high-severity use after free vulnerability in Linux kernel, published on 13 Jan 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
Input: lkkbd - disable pending work before freeing device
lkkbd_interrupt() schedules lk->tq via schedule_work(), and the work handler lkkbd_reinit() dereferences the lkkbd structure and its serio/input_dev fields.
lkkbd_disconnect() and error paths in lkkbd_connect() free the lkkbd structure without preventing the reinit work from being queued again until serio_close() returns. This can allow the work handler to run after the structure has been freed, leading to a potential use-after-free.
Use disable_work_sync() instead of cancel_work_sync() to ensure the reinit work cannot be re-queued, and call it both in lkkbd_disconnect() and in lkkbd_connect() error paths after serio_open().
Weakness: CWE-416
Which versions are affected by CVE-2025-71073?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-71073?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2025-71073 being exploited?
There is no known exploitation of CVE-2025-71073 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-74354, BELL-CVE-2025-71073, DEBIAN-CVE-2025-71073, GHSA-fh34-wp9w-rw28, ROOT-OS-DEBIAN-11-CVE-2025-71073, ROOT-OS-DEBIAN-12-CVE-2025-71073 and 4 more.