CVE-2025-20888

Name of the Vulnerable Software and Affected Versions libsthmbc.so versions prior to SMR Jan-2025 Release 1

Description The issue is related to an out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so. This allows local attackers to execute arbitrary code with privilege, requiring user interaction to trigger the issue.

Recommendations For versions prior to SMR Jan-2025 Release 1, update to SMR Jan-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the smp4vtd functionality in libsthmbc.so to minimize the risk of exploitation.