In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfo | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.140-154.222Upgrade bpftoolUpgrade kernel6.12-modules-extraUpgrade perfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-man | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-xilinxUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1080-ibm | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub