In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-devel | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-livepatch-6.12.29-33.102Upgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perfUpgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfo | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-devel-rt | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-kvm-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-virtualUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-gcp-6.8 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub