CVE-2025-71122: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
In the Linux kernel, the following vulnerability has been resolved:
iommufd/selftest: Check for overflow in IOMMUTESTOPADDRESERVED
syzkaller found it could overflow math in the test infrastructure and cause a WARNON by corrupting the reserved interval tree. This only effects test kernels with CONFIGIOMMUFDTEST.
Validate the user input length in the test ioctl.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the IOMMUFD test ioctl handling IOMMU_TEST_OP_ADD_RESERVED, validate the user-input length before performing arithmetic to prevent overflow and corruption of the reserved interval tree.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71122?
CVE-2025-71122 has been classified with a medium severity level due to the potential for overflow in the IOMMU test operations.
How do I fix CVE-2025-71122?
To fix CVE-2025-71122, update the Linux kernel to the latest stable version recommended by your distribution.
Who is affected by CVE-2025-71122?
CVE-2025-71122 affects systems running vulnerable versions of the Linux kernel that utilize the IOMMU testing infrastructure.
What are the potential impacts of CVE-2025-71122?
The potential impacts of CVE-2025-71122 include system instability or warnings related to corrupted memory when running IOMMU tests.
When was CVE-2025-71122 disclosed?
CVE-2025-71122 was disclosed as a vulnerability affecting the Linux kernel's IOMMU testing functionality.