CVE-2025-38625: vfio/pds: Fix missing detach_ioas op
In the Linux kernel, the following vulnerability has been resolved:
vfio/pds: Fix missing detachioas op
When CONFIGIOMMUFD is enabled and a device is bound to the pdsvfiopci driver, the following WARNON() trace is seen and probe fails:
WARNING: CPU: 0 PID: 5040 at drivers/vfio/vfiomain.c:317 vfioregisterdev+0x130/0x140 [vfio] <...> pdsvfiopci 0000:08:00.1: probe with driver pdsvfiopci failed with error -22
This is because the driver's vfiodeviceops.detachioas isn't set.
Fix this by using the generic vfioiommufdphysicaldetachioas function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38625?
CVE-2025-38625 is a vulnerability in the Linux kernel related to the vfio/pds driver, which can cause probe failures.
How do I fix CVE-2025-38625?
To fix CVE-2025-38625, ensure you update your Linux kernel to a version that includes the necessary patches addressing this vulnerability.
Which systems are affected by CVE-2025-38625?
CVE-2025-38625 affects systems running a version of the Linux kernel with the CONFIG_IOMMUFD enabled.
What are the symptoms of CVE-2025-38625?
The symptoms of CVE-2025-38625 include a WARNING message during the probe of a device bound to the pds_vfio_pci driver.
Is there a workaround for CVE-2025-38625?
There is no specific workaround for CVE-2025-38625; updating the kernel to a patched version is recommended.