CVE-2025-38676

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

This vulnerability could cause a one-byte stack buffer overflow when parsing the ivrs_acpihid kernel command-line parameter. The bug has been fixed by allocating space for the NULL terminator and tightening the length check. Since triggering this flaw requires controlling the kernel boot parameters, the privilege requirement is rated High (PR:H), meaning only an administrator or someone with equivalent system control could exploit it.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.