CVE-2025-38676
iommu/amd: Avoid stack buffer overflow from kernel cmdline
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.10.241, 5.15.190, 6.1.149, 5.5, 6.3
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 5.10.175 · fixed in 5.10.241; From 5.15.103 · fixed in 5.15.190; From 6.1.16 · fixed in 6.1.149; From 5.4.237 · fixed in 5.5; From 6.2.3 · fixed in 6.3
- Linux Linux
6.3
References 8
git.kernel.org
- stable/c/a732502bf3bbe859613b6d7b2b0313b11f0474ac
- stable/c/0ad8509b468fa1058f4f400a1829f29e4ccc4de8
- stable/c/9ff52d3af0ef286535749e14e3fe9eceb39a8349
- stable/c/8f80c633cba144f721d38d9380f23d23ab7db10e
- stable/c/4bdb0f78bddbfa77d3ab458a21dd9cec495d317a
- stable/c/736db11c86f03e717fc4bf771d05efdf10d23acb
- stable/c/8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec