CVE-2025-38676None▾ TwilightPoC availableIn the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 2.8 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
1 GitHub repo (last check)
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Avoid stack buffer overflow from kernel cmdline
While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.
Linux >= f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 < a732502bf3bbe859613b6d7b2b0313b11f0474acLinux >= c513043e0afe6a8ba79d00af358655afabb576d2 < 0ad8509b468fa1058f4f400a1829f29e4ccc4de8Linux >= 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 < 9ff52d3af0ef286535749e14e3fe9eceb39a8349Linux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 8f80c633cba144f721d38d9380f23d23ab7db10eLinux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 4bdb0f78bddbfa77d3ab458a21dd9cec495d317aLinux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 736db11c86f03e717fc4bf771d05efdf10d23acbLinux >= b6b26d86c61c441144c72f842f7469bb686e1211 < 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdecLinux 5e97dc748d13fad582136ba0c8cec215c7aeeb17Linux 63cd11165e5e0ea2012254c764003eda1f9adb7dLinux >= 5.10.175 < 5.10.241Linux >= 5.15.103 < 5.15.190Linux >= 6.1.16 < 6.1.149Linux >= 5.4.237 < 5.5Linux >= 6.2.3 < 6.3Linux 6.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses