CVE-2025-71122

An integer overflow vulnerability was found in the Linux kernel's IOMMUFD selftest infrastructure. The IOMMU_TEST_OP_ADD_RESERVED ioctl does not properly validate user-supplied length values, allowing arithmetic overflow that corrupts the reserved interval tree and triggers a WARN_ON. This issue only affects test kernels compiled with CONFIG_IOMMUFD_TEST enabled.

This vulnerability exclusively affects development and testing kernels with CONFIG_IOMMUFD_TEST enabled, which is not enabled in production kernel builds. The selftest infrastructure is used for IOMMUFD driver development and validation. Production systems do not include this test code and are not affected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.