CVE-2025-38625
BaseFortify
Publication date: 2025-08-22
Last updated on: 2025-11-26
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's vfio/pds driver when CONFIG_IOMMUFD is enabled. The issue is that the driver's vfio_device_ops.detach_ioas operation is missing, causing a warning and probe failure when a device is bound to the pds_vfio_pci driver. The problem is fixed by using the generic vfio_iommufd_physical_detach_ioas function to properly set the detach_ioas operation.
How can this vulnerability impact me? :
The vulnerability causes the pds_vfio_pci driver probe to fail with an error, which means devices bound to this driver may not initialize correctly when CONFIG_IOMMUFD is enabled. This can lead to device malfunction or inability to use certain hardware features relying on this driver.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking the system logs for the specific warning message related to the vfio driver. Look for the following warning in the kernel logs: "WARNING: CPU: ... pds_vfio_pci ... probe with driver pds_vfio_pci failed with error -22". You can use the command 'dmesg | grep pds_vfio_pci' or 'journalctl -k | grep pds_vfio_pci' to find this warning.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that your Linux kernel is updated to a version where the vfio/pds driver includes the fix that sets the vfio_device_ops.detach_ioas using the generic vfio_iommufd_physical_detach_ioas function. Until then, avoid binding devices to the pds_vfio_pci driver when CONFIG_IOMMUFD is enabled to prevent the probe failure and warning.