CVE-2025-38676

HighCVSS 7.8/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9, < a732502bf3bbe859613b6d7b2b0313b11f0474ac; >= c513043e0afe6a8ba79d00af358655afabb576d2, < 0ad8509b468fa1058f4f400a1829f29e4ccc4de8; >= 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60, < 9ff52d3af0ef286535749e14e3fe9eceb39a8349; >= b6b26d86c61c441144c72f842f7469bb686e1211, < 8f80c633cba144f721d38d9380f23d23ab7db10e; >= b6b26d86c61c441144c72f842f7469bb686e1211, < 4bdb0f78bddbfa77d3ab458a21dd9cec495d317a; >= b6b26d86c61c441144c72f842f7469bb686e1211, < 736db11c86f03e717fc4bf771d05efdf10d23acb; >= b6b26d86c61c441144c72f842f7469bb686e1211, < 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec; 5e97dc748d13fad582136ba0c8cec215c7aeeb17; 63cd11165e5e0ea2012254c764003eda1f9adb7d; >= 5.10.175, < 5.10.241; >= 5.15.103, < 5.15.190; >= 6.1.16, < 6.1.149; >= 5.4.237, < 5.5; >= 6.2.3, < 6.3
LinuxLinux6.3
SiemensSIMATIC CN 4100< V5.0

References

Timeline

Published
Aug 26, 2025
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-386777.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming ZhaCVE-2025-386785.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A chain/flowtCVE-2025-386797.1In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check CurrentlCVE-2025-38686.1The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all veCVE-2025-386807.1In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() TCVE-2025-386814.7In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() MemorCVE-2025-386827.8In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2c_unregister_device() BeforeCVE-2025-386835.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing coCVE-2025-386845.5In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang rCVE-2025-386857.8In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue trCVE-2025-386865.5In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry CVE-2025-386874.7In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-af
CVE-2025-38676: High severity, CVSS 7.8 | Vulnix