Riskcovery

CVE-2025-37900

iommu: Fix two issues in iommu_copy_struct_from_user()

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/86881827-8E2D-461C-BDA3-FA8FD14C343C@nvidia.com

And Alok pointed out a typo at the same time: https://lore.kernel.org/all/480536af-6830-43ce-a327-adbd13dc3f1d@oracle.com

Since both issues were copied from iommu_copy_struct_from_user(), fix them first in the current header.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e9d36c07bb787840e4813fb09a929a17d522a69f to before 2e303d010722787dc84d94f68d70fe10dfc1b9eaAffected
  • e9d36c07bb787840e4813fb09a929a17d522a69f to before 967d6f0d9a20a1bf15ee7ed881e2d4e532e22709Affected
  • e9d36c07bb787840e4813fb09a929a17d522a69f to before 30a3f2f3e4bd6335b727c83c08a982d969752bc1Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.28 through 6.12.*Not affected
  • 6.14.6 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.