CVE-2025-71270 LoongArch: Enable exception fixup for specific ADE subcode
A missing exception fixup in the LoongArch BPF JIT can cause kernel crashes when BPF programs trigger specific memory access errors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-71270?
CVE-2025-71270 is a medium-severity denial of service vulnerability in Linux kernel, published on 18 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Enable exception fixup for specific ADE subcode
This patch allows the LoongArch BPF JIT to handle recoverable memory access errors generated by BPF_PROBE_MEM* instructions.
When a BPF program performs memory access operations, the instructions it executes may trigger ADEM exceptions. The kernel’s built-in BPF exception table mechanism (EX_TYPE_BPF) will generate corresponding exception fixup entries in the JIT compilation phase; however, the architecture-specific trap handling function needs to proactively call the common fixup routine to achieve exception recovery.
do_ade(): fix EX_TYPE_BPF memory access exceptions for BPF programs, ensure safe execution.
Relevant test cases: illegal address access tests in module_attach and subprogs_extable of selftests/bpf.
Which versions are affected by CVE-2025-71270?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-71270?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-71270 being exploited?
There is no known exploitation of CVE-2025-71270 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-71270, DEBIAN-CVE-2025-71270, GHSA-7652-r6cv-cv5f, ROOT-OS-DEBIAN-11-CVE-2025-71270, ROOT-OS-UBUNTU-2204-CVE-2025-71270, ROOT-OS-UBUNTU-2404-CVE-2025-71270 and 1 more.