Buffer Overflow Vulnerability in Linux Kernel Affecting AMD IOMMU

CVE-2025-38676

What is CVE-2025-38676?

A buffer overflow vulnerability has been identified in the Linux kernel related to the AMD IOMMU. This issue occurs when handling kernel command line parameters, specifically when writing an 'acpiid' string. In certain conditions, it is possible to write beyond the allocated memory, which could lead to unpredictable behavior or potential exploitation. The vulnerability has been addressed to ensure that this overflow is prevented, enhancing the overall security of systems utilizing the kernel.

References