In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn't take into account the lengths of individual hid and uid buffers so the check is insufficient in some cases. For example if the length of hid string is 4 and the length of the uid string is 260, the length of str will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer which size is 256.
The same applies to the hid string with length 13 and uid string with length 250.
Check the length of hid and uid strings separately to prevent buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.238-231.953Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade bpftool | Jun 24, 2025 | May 20, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade kernel-livepatch-6.12.29-33.102Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfo | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade dtb-appleUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rt | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-xilinxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-genericUpgrade linux-image-generic-64k-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-oem-24.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-6.8 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub