In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Avoid stack buffer overflow from kernel cmdline
While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.
[
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ff52d3af0ef286535749e14e3fe9eceb39a8349",
"signature_version": "v1",
"id": "CVE-2025-38676-0a8f9e5f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ad8509b468fa1058f4f400a1829f29e4ccc4de8",
"signature_version": "v1",
"id": "CVE-2025-38676-2176864e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ad8509b468fa1058f4f400a1829f29e4ccc4de8",
"signature_version": "v1",
"id": "CVE-2025-38676-27607624",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bdb0f78bddbfa77d3ab458a21dd9cec495d317a",
"signature_version": "v1",
"id": "CVE-2025-38676-76f2e2ca",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f80c633cba144f721d38d9380f23d23ab7db10e",
"signature_version": "v1",
"id": "CVE-2025-38676-9b6e8ff1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec",
"signature_version": "v1",
"id": "CVE-2025-38676-a3c6d311",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a732502bf3bbe859613b6d7b2b0313b11f0474ac",
"signature_version": "v1",
"id": "CVE-2025-38676-a44ad765",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f80c633cba144f721d38d9380f23d23ab7db10e",
"signature_version": "v1",
"id": "CVE-2025-38676-b7fba9ae",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bdb0f78bddbfa77d3ab458a21dd9cec495d317a",
"signature_version": "v1",
"id": "CVE-2025-38676-d1f35dbe",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@736db11c86f03e717fc4bf771d05efdf10d23acb",
"signature_version": "v1",
"id": "CVE-2025-38676-d2286235",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a732502bf3bbe859613b6d7b2b0313b11f0474ac",
"signature_version": "v1",
"id": "CVE-2025-38676-d7cb9e1e",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ff52d3af0ef286535749e14e3fe9eceb39a8349",
"signature_version": "v1",
"id": "CVE-2025-38676-e4df240e",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec",
"signature_version": "v1",
"id": "CVE-2025-38676-edaf852d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"288049997721431520775101001661303020286",
"91202070099516732002002926585700651476",
"211971547261047297169435875449942669111",
"65490812992207629070745397798657294059",
"264120628521852120130777631070787732557",
"115281030200211465237329530524917659992",
"117436132149049628974042746834699399983",
"114787648532574171455424089044769909412"
]
}
},
{
"deprecated": false,
"target": {
"file": "drivers/iommu/amd/init.c",
"function": "parse_ivrs_acpihid"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@736db11c86f03e717fc4bf771d05efdf10d23acb",
"signature_version": "v1",
"id": "CVE-2025-38676-f95240d8",
"digest": {
"function_hash": "315732246710406680726479352277265982958",
"length": 1818.0
}
}
]