01 Record

CVE-2025-38676

iommu/amd: Avoid stack buffer overflow from kernel cmdline

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

iommu/amd: Avoid stack buffer overflow from kernel cmdline

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.39% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 32.4% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-26 13:07Z1 YR AGO

Last updated

2026-05-23 16:00Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-805Buffer Access with Incorrect Length ValueBase

Data version

5.2

Document digest

445a996e2107f57bae8b67bdfd822189da88187efdba771d332bc239b0416dfe

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 to < a732502bf3bbe859613b6d7b2b0313b11f0474ac, c513043e0afe6a8ba79d00af358655afabb576d2 to < 0ad8509b468fa1058f4f400a1829f29e4ccc4de8, 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 to < 9ff52d3af0ef286535749e14e3fe9eceb39a8349, b6b26d86c61c441144c72f842f7469bb686e1211 to < 8f80c633cba144f721d38d9380f23d23ab7db10e, b6b26d86c61c441144c72f842f7469bb686e1211 to < 4bdb0f78bddbfa77d3ab458a21dd9cec495d317a, b6b26d86c61c441144c72f842f7469bb686e1211 to < 736db11c86f03e717fc4bf771d05efdf10d23acb, b6b26d86c61c441144c72f842f7469bb686e1211 to < 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec, 5e97dc748d13fad582136ba0c8cec215c7aeeb17, 63cd11165e5e0ea2012254c764003eda1f9adb7d, 5.10.175 to < 5.10.241, 5.15.103 to < 5.15.190, 6.1.16 to < 6.1.149, 5.4.237 to < 5.5, 6.2.3 to < 6.3, 6.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a732502bf3bbe859613b6d7b2b0313b11f0474ac
git.kernel.orghttps://git.kernel.org/stable/c/0ad8509b468fa1058f4f400a1829f29e4ccc4de8
git.kernel.orghttps://git.kernel.org/stable/c/9ff52d3af0ef286535749e14e3fe9eceb39a8349
git.kernel.orghttps://git.kernel.org/stable/c/8f80c633cba144f721d38d9380f23d23ab7db10e
git.kernel.orghttps://git.kernel.org/stable/c/4bdb0f78bddbfa77d3ab458a21dd9cec495d317a
git.kernel.orghttps://git.kernel.org/stable/c/736db11c86f03e717fc4bf771d05efdf10d23acb
git.kernel.orghttps://git.kernel.org/stable/c/8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-38676

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38676

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References