CVE-2025-38688 iommufd: Prevent ALIGN() overflow

🗓️ 04 Sep 2025 15:32:42Reported by LinuxType

Fix iommufd alignment overflow by using get_add_overflow to prevent wrap during virtual address allocation.

Reporter	Title	Published	Views	Family All 67
AstraLinux	Astra Linux – Vulnerability in Linux 6.12	1 Nov 202510:54	–	astralinux
Circl	CVE-2025-38688	4 Sep 202516:53	–	circl
CNNVD	Linux kernel 安全漏洞	4 Sep 202500:00	–	cnnvd
CVE	CVE-2025-38688	4 Sep 202515:32	–	cve
Debian CVE	CVE-2025-38688	4 Sep 202515:32	–	debiancve
EUVD	EUVD-2025-26781	3 Oct 202520:07	–	euvd
Mageia	Updated kernel-linus packages fix security vulnerabilities	9 Oct 202520:24	–	mageia
Mageia	Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities	10 Oct 202503:12	–	mageia
Microsoft CVE	iommufd: Prevent ALIGN() overflow	6 Sep 202501:01	–	mscve
NVD	CVE-2025-38688	4 Sep 202516:15	–	nvd

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iommu/iommufd/io_pagetable.c"
    ],
    "versions": [
      {
        "version": "51fe6141f0f64ae0bbc096a41a07572273e8c0ef",
        "lessThan": "d19b817540c0abe84854a64ee9ee34cecc3bbeef",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51fe6141f0f64ae0bbc096a41a07572273e8c0ef",
        "lessThan": "ebb6021560b94649bec6b8faba6fe0dca2218e81",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51fe6141f0f64ae0bbc096a41a07572273e8c0ef",
        "lessThan": "e42a046bb41dcdde4f766a17d8211842007ed537",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51fe6141f0f64ae0bbc096a41a07572273e8c0ef",
        "lessThan": "79fad1917802c28de51a479318a056a6fbe3e2f2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51fe6141f0f64ae0bbc096a41a07572273e8c0ef",
        "lessThan": "b42497e3c0e74db061eafad41c0cd7243c46436b",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iommu/iommufd/io_pagetable.c"
    ],
    "versions": [
      {
        "version": "6.2",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.2",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.103",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.43",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15.11",
        "lessThanOrEqual": "6.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16.2",
        "lessThanOrEqual": "6.16.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/79fad1917802c28de51a479318a056a6fbe3e2f2
git	www.git.kernel.org/stable/c/b42497e3c0e74db061eafad41c0cd7243c46436b
git	www.git.kernel.org/stable/c/e42a046bb41dcdde4f766a17d8211842007ed537
git	www.git.kernel.org/stable/c/ebb6021560b94649bec6b8faba6fe0dca2218e81
git	www.git.kernel.org/stable/c/d19b817540c0abe84854a64ee9ee34cecc3bbeef

11 May 2026 21:33Current

EPSS0.00153