CVE-2025-38676
BaseFortify
Publication date: 2025-08-26
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 5.10.244 |
| linux | linux_kernel | 6.1.153 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a stack buffer overflow in the Linux kernel's iommu/amd component. It occurs when the kernel command line contains a maximum length string for the "str" argument, causing the code to write 1 byte past the end of the "acpiid" buffer. Although the kernel command line is usually trusted, this overflow could lead to unexpected behavior or crashes.
How can this vulnerability impact me? :
The vulnerability could potentially cause the Linux kernel to behave unpredictably or crash due to the stack buffer overflow. This might lead to system instability or denial of service. Since it involves writing beyond a buffer boundary, it could also be exploited to execute arbitrary code, depending on the environment and usage.