{"id":"CVE-2025-38676","title":"iommu/amd: Avoid stack buffer overflow from kernel cmdline","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Avoid stack buffer overflow from kernel cmdline\n\nWhile the kernel command line is considered trusted in most environments,\navoid writing 1 byte past the end …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 < a732502bf3bbe859613b6d7b2b0313b11f0474ac","Linux >= c513043e0afe6a8ba79d00af358655afabb576d2 < 0ad8509b468fa1058f4f400a1829f29e4ccc4de8","Linux >= 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 < 9ff52d3af0ef286535749e14e3fe9eceb39a8349","Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 8f80c633cba144f721d38d9380f23d23ab7db10e","Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 4bdb0f78bddbfa77d3ab458a21dd9cec495d317a","Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 736db11c86f03e717fc4bf771d05efdf10d23acb","Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec","Linux 5e97dc748d13fad582136ba0c8cec215c7aeeb17","Linux 63cd11165e5e0ea2012254c764003eda1f9adb7d","Linux >= 5.10.175 < 5.10.241","Linux >= 5.15.103 < 5.15.190","Linux >= 6.1.16 < 6.1.149","Linux >= 5.4.237 < 5.5","Linux >= 6.2.3 < 6.3","Linux 6.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:06:49.930469Z"},"exploitAvailable":true,"published":"2025-08-26","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:52.105Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38676","references":[{"url":"https://git.kernel.org/stable/c/a732502bf3bbe859613b6d7b2b0313b11f0474ac"},{"url":"https://git.kernel.org/stable/c/0ad8509b468fa1058f4f400a1829f29e4ccc4de8"},{"url":"https://git.kernel.org/stable/c/9ff52d3af0ef286535749e14e3fe9eceb39a8349"},{"url":"https://git.kernel.org/stable/c/8f80c633cba144f721d38d9380f23d23ab7db10e"},{"url":"https://git.kernel.org/stable/c/4bdb0f78bddbfa77d3ab458a21dd9cec495d317a"},{"url":"https://git.kernel.org/stable/c/736db11c86f03e717fc4bf771d05efdf10d23acb"},{"url":"https://git.kernel.org/stable/c/8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec"}],"tags":["cve.org","exploit-available"],"epss":0.00417,"epssPercentile":0.36232,"exploits":{"github":1,"githubRepos":["https://github.com/14mb1v45h/CVE-2025-38676"],"checkedAt":"2026-11-08T18:56:30.603Z"},"ingestedAt":"2026-11-05T22:38:32.009Z","slug":"CVE-2025-38676","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Avoid stack buffer overflow from kernel cmdline\n\nWhile the kernel command line is considered trusted in most environments,\navoid writing 1 byte past the end of \"acpiid\" if the \"str\" argument is\nmaximum length.\n\n## Affected\n\n- `Linux >= f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 < a732502bf3bbe859613b6d7b2b0313b11f0474ac`\n- `Linux >= c513043e0afe6a8ba79d00af358655afabb576d2 < 0ad8509b468fa1058f4f400a1829f29e4ccc4de8`\n- `Linux >= 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 < 9ff52d3af0ef286535749e14e3fe9eceb39a8349`\n- `Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 8f80c633cba144f721d38d9380f23d23ab7db10e`\n- `Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 4bdb0f78bddbfa77d3ab458a21dd9cec495d317a`\n- `Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 736db11c86f03e717fc4bf771d05efdf10d23acb`\n- `Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec`\n- `Linux 5e97dc748d13fad582136ba0c8cec215c7aeeb17`\n- `Linux 63cd11165e5e0ea2012254c764003eda1f9adb7d`\n- `Linux >= 5.10.175 < 5.10.241`\n- `Linux >= 5.15.103 < 5.15.190`\n- `Linux >= 6.1.16 < 6.1.149`\n- `Linux >= 5.4.237 < 5.5`\n- `Linux >= 6.2.3 < 6.3`\n- `Linux 6.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}