In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.238-231.953Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perf | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-debuginfoUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-devel | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftool | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelists | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-aws-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-genericUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.14.0-1007-oem | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub