CVE-2025-38676

Katalog CVE

CVSS 7.8 · High EPSS 0,40%

Kerentanan Out-of-bounds Write pada linux kernel, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Rincian

Terbit di NVD

26 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0ad8509b468fa1058f4f400a1829f29e4ccc4de8 patch
• https://git.kernel.org/stable/c/4bdb0f78bddbfa77d3ab458a21dd9cec495d317a patch
• https://git.kernel.org/stable/c/736db11c86f03e717fc4bf771d05efdf10d23acb patch
• https://git.kernel.org/stable/c/8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec patch
• https://git.kernel.org/stable/c/8f80c633cba144f721d38d9380f23d23ab7db10e patch
• https://git.kernel.org/stable/c/9ff52d3af0ef286535749e14e3fe9eceb39a8349 patch
• https://git.kernel.org/stable/c/a732502bf3bbe859613b6d7b2b0313b11f0474ac patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html