In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headers | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.29-33.102Upgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-tools | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-allwinner | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-fips-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-intelUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-lowlatency-5.15 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub