Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-37900

iommu: Fix two issues in iommu_copy_struct_from_user()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_user() In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/86881827-8E2D-461C-BDA3-FA8FD14C343C@nvidia.com And Alok pointed out a typo at the same time: https://lore.kernel.org/all/480536af-6830-43ce-a327-adbd13dc3f1d@oracle.com Since both issues were copied from iommu_copy_struct_from_user(), fix them first in the current header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e9d36c07bb787840e4813fb09a929a17d522a69f to < 2e303d010722787dc84d94f68d70fe10dfc1b9eaaffected
  • e9d36c07bb787840e4813fb09a929a17d522a69f to < 967d6f0d9a20a1bf15ee7ed881e2d4e532e22709affected
  • e9d36c07bb787840e4813fb09a929a17d522a69f to < 30a3f2f3e4bd6335b727c83c08a982d969752bc1affected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.12.28 to ≤ 6.12.*unaffected
  • 6.14.6 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References