CVE-2025-38688

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the iommufd subsystem where an integer overflow can occur during IOVA allocation due to an incorrect alignment calculation using the ALIGN() function. This overflow can lead to a corrupted iova, potentially allowing userspace to create a mapping that overlaps with other mappings or reserved ranges. The issue was addressed by replacing the ALIGN() function with get add overflow() to prevent the overflow and consolidating code into a helper function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.