PT-2026-2883

CVE-2025-71122

·

Published

2025-01-01

·

Updated

2026-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description An integer overflow issue was identified in the iommufd/selftest component of the Linux kernel. The issue was discovered through syzkaller testing, which revealed a potential for corruption of the reserved interval tree due to an overflow in the IOMMU TEST OP ADD RESERVED operation. This overflow could be triggered by manipulating user input within the test infrastructure, leading to a WARN ON condition. The vulnerability is present in test kernels with CONFIG IOMMUFD TEST enabled.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1782155469
MGASA-2026-0017
MGASA-2026-0018
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1
USN-8440-1
Found an issue in the description? Have something to add? Feel free to write us 👾