In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftool | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.140-154.222 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-armUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amazon | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gkeUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibmUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04bUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-genericUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub