In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftoolUpgrade kernel-tools | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade perfUpgrade kernel6.12-modules-extraUpgrade kernel-tools-devel | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-extra | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intelUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-xilinxUpgrade linux-image-gcpUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-generic-64k-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-awsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-hwe-22.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub