CVE-2025-38688: iommufd: Prevent ALIGN() overflow
In the Linux kernel, the following vulnerability has been resolved:
iommufd: Prevent ALIGN() overflow
When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONGMAX then the ALIGN() can wrap resulting in a corrupted iova.
Open code the ALIGN() using getaddoverflow() to prevent this. This simplifies the checks as we don't need to check for length earlier either.
Consolidate the two copies of this code under a single helper.
This bug would allow userspace to create a mapping that overlaps with some other mapping or a reserved range.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38688?
The severity of CVE-2025-38688 has been classified as having a moderate impact due to potential IOVA corruption.
How do I fix CVE-2025-38688?
To fix CVE-2025-38688, upgrade to the latest version of the Linux kernel where the vulnerability has been patched.
What software is affected by CVE-2025-38688?
CVE-2025-38688 affects the Linux kernel specifically, particularly versions prior to the patch release.
What does CVE-2025-38688 vulnerability entail?
CVE-2025-38688 involves an issue with the iommufd in the Linux kernel that can lead to IOVA corruption due to an overflow.
Is CVE-2025-38688 being actively exploited?
As of now, there are no reports indicating that CVE-2025-38688 is actively being exploited in the wild.