Description

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

INFO

Published Date :

2025-08-26T13:07:48.761Z

Last Modified :

2025-11-03T17:40:59.770Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-38676 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-38676.

URL Resource
https://git.kernel.org/stable/c/0ad8509b468fa1058f4f400a1829f29e4ccc4de8 cve-icon cve-icon
https://git.kernel.org/stable/c/4bdb0f78bddbfa77d3ab458a21dd9cec495d317a cve-icon cve-icon
https://git.kernel.org/stable/c/736db11c86f03e717fc4bf771d05efdf10d23acb cve-icon cve-icon
https://git.kernel.org/stable/c/8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec cve-icon cve-icon
https://git.kernel.org/stable/c/8f80c633cba144f721d38d9380f23d23ab7db10e cve-icon cve-icon
https://git.kernel.org/stable/c/9ff52d3af0ef286535749e14e3fe9eceb39a8349 cve-icon cve-icon
https://git.kernel.org/stable/c/a732502bf3bbe859613b6d7b2b0313b11f0474ac cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025082627-CVE-2025-38676-326c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38676 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38676 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact