Riskcovery

CVE-2025-38625

vfio/pds: Fix missing detach_ioas op

State
Published
Severity
Not scored
Published
Aug 22, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

vfio/pds: Fix missing detach_ioas op

When CONFIG_IOMMUFD is enabled and a device is bound to the pds_vfio_pci driver, the following WARN_ON() trace is seen and probe fails:

WARNING: CPU: 0 PID: 5040 at drivers/vfio/vfio_main.c:317 __vfio_register_dev+0x130/0x140 [vfio] <...> pds_vfio_pci 0000:08:00.1: probe with driver pds_vfio_pci failed with error -22

This is because the driver's vfio_device_ops.detach_ioas isn't set.

Fix this by using the generic vfio_iommufd_physical_detach_ioas function.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 38fe3975b4c2c5eeefb543e09f9620da18b0d069 to before 7dbfae90c5a33f6b694e7068bc9522cc2655373dAffected
  • 38fe3975b4c2c5eeefb543e09f9620da18b0d069 to before 1df8150ab4cc422bddfbd312d6758c50b688a971Affected
  • 38fe3975b4c2c5eeefb543e09f9620da18b0d069 to before b265dff9fcf047f660976a5c92c83e7c414a2d95Affected
  • 38fe3975b4c2c5eeefb543e09f9620da18b0d069 to before 88b962fbd0ac30a65d2869c68d2f145be46ebe4dAffected
  • 38fe3975b4c2c5eeefb543e09f9620da18b0d069 to before fe24d5bc635e103a517ec201c3cb571eeab8be2fAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.102 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.