CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Avoid stack buffer overflow from kernel cmdline
While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38676?
CVE-2025-38676 has been rated as a moderate severity vulnerability due to its potential for stack buffer overflows.
How do I fix CVE-2025-38676?
To fix CVE-2025-38676, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What systems are affected by CVE-2025-38676?
CVE-2025-38676 affects the Linux kernel, specifically versions that utilize the IOMMU AMD implementation.
Is CVE-2025-38676 actively being exploited?
As of now, there have been no reports confirming that CVE-2025-38676 is actively being exploited in the wild.
What are the potential impacts of CVE-2025-38676?
The potential impacts of CVE-2025-38676 include system crashes and possible escalation of privileges due to stack buffer overflows.