PT-2025-34760 · Linux+5 · Linux Kernel+5
Published
2025-08-04
·
Updated
2026-04-20
·
CVE-2025-38676
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A stack buffer overflow in the iommu/amd component of the Linux kernel was addressed. The vulnerability occurs when handling the kernel command line, specifically when processing the “acpiid” argument. Although the kernel command line is generally considered a trusted environment, a buffer overflow can occur if the “str” argument reaches its maximum length, potentially writing one byte beyond the allocated buffer for “acpiid”.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu