Description

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_user() In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/[email protected] And Alok pointed out a typo at the same time: https://lore.kernel.org/all/[email protected] Since both issues were copied from iommu_copy_struct_from_user(), fix them first in the current header.

INFO

Published Date :

2025-05-20T15:21:35.433Z

Last Modified :

2025-05-26T05:23:19.890Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-37900 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-37900.

URL Resource
https://git.kernel.org/stable/c/2e303d010722787dc84d94f68d70fe10dfc1b9ea cve-icon cve-icon
https://git.kernel.org/stable/c/30a3f2f3e4bd6335b727c83c08a982d969752bc1 cve-icon cve-icon
https://git.kernel.org/stable/c/967d6f0d9a20a1bf15ee7ed881e2d4e532e22709 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025052055-CVE-2025-37900-717c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37900 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37900 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact