PT-2025-27991 · Linux+5 · Linux Kernel+5

Published

2025-05-20

·

Updated

2026-02-20

·

CVE-2025-38216

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A regression was introduced in the Linux kernel affecting PCI aliased devices behind PCIe-to-PCI bridges, causing issues with keyboard and touchpad functionality on certain Apple Macbooks. The problem arose from a change in the context entry setup during domain attachment, switching from a set-and-check policy to a clear-and-reset approach. This led to errors in device communication, including fault status registrations and failed write operations to devices.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-15484
CVE-2025-38216
OPENSUSE-SU-2025:15544-1
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:03601-1
SUSE-SU-2025:03626-1
SUSE-SU-2025:03633-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2025:3725-1
USN-7649-1
USN-7649-2
USN-7650-1
USN-7665-1
USN-7665-2
USN-7721-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu