CVE-2025-38625
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-22

Last updated on: 2025-11-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: vfio/pds: Fix missing detach_ioas op When CONFIG_IOMMUFD is enabled and a device is bound to the pds_vfio_pci driver, the following WARN_ON() trace is seen and probe fails: WARNING: CPU: 0 PID: 5040 at drivers/vfio/vfio_main.c:317 __vfio_register_dev+0x130/0x140 [vfio] <...> pds_vfio_pci 0000:08:00.1: probe with driver pds_vfio_pci failed with error -22 This is because the driver's vfio_device_ops.detach_ioas isn't set. Fix this by using the generic vfio_iommufd_physical_detach_ioas function.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-22
Last Modified
2025-11-26
Generated
2026-06-16
AI Q&A
2025-08-22
EPSS Evaluated
2026-06-15
NVD
CVE-2025-38625
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 5.15.160 (inc) to 5.16 (inc)
linux linux_kernel From 5.15.160 (inc) to 5.16 (inc)
linux linux_kernel From 5.15.160 (inc) to 5.16 (inc)
linux linux_kernel From 5.15.160 (inc) to 5.16 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the Linux kernel's vfio/pds driver when CONFIG_IOMMUFD is enabled. The issue is that the driver's vfio_device_ops.detach_ioas operation is missing, causing a warning and probe failure when a device is bound to the pds_vfio_pci driver. The problem is fixed by using the generic vfio_iommufd_physical_detach_ioas function to properly set the detach_ioas operation.

Impact Analysis

The vulnerability causes the pds_vfio_pci driver probe to fail with an error, which means devices bound to this driver may not initialize correctly when CONFIG_IOMMUFD is enabled. This can lead to device malfunction or inability to use certain hardware features relying on this driver.

Detection Guidance

This vulnerability can be detected by checking the system logs for the specific warning message related to the vfio driver. Look for the following warning in the kernel logs: "WARNING: CPU: ... pds_vfio_pci ... probe with driver pds_vfio_pci failed with error -22". You can use the command 'dmesg | grep pds_vfio_pci' or 'journalctl -k | grep pds_vfio_pci' to find this warning.

Mitigation Strategies

To mitigate this vulnerability, ensure that your Linux kernel is updated to a version where the vfio/pds driver includes the fix that sets the vfio_device_ops.detach_ioas using the generic vfio_iommufd_physical_detach_ioas function. Until then, avoid binding devices to the pds_vfio_pci driver when CONFIG_IOMMUFD is enabled to prevent the probe failure and warning.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-38625. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart