In the Linux kernel, the following vulnerability has been resolved:
iommu: Fix two issues in iommu_copy_struct_from_user()
In the review for iommu_copy_struct_to_user() helper, Matt pointed out that
a NULL pointer should be rejected prior to dereferencing it:
https://lore.kernel.org/all/[email protected]
And Alok pointed out a typo at the same time:
https://lore.kernel.org/all/[email protected]
Since both issues were copied from iommu_copy_struct_from_user(), fix them
first in the current header.
References
Configurations
Configuration 1 (hide)
|
History
19 Nov 2025, 14:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/2e303d010722787dc84d94f68d70fe10dfc1b9ea - Patch | |
| References | () https://git.kernel.org/stable/c/30a3f2f3e4bd6335b727c83c08a982d969752bc1 - Patch | |
| References | () https://git.kernel.org/stable/c/967d6f0d9a20a1bf15ee7ed881e2d4e532e22709 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:* |
|
| CWE | CWE-476 | |
| First Time |
Linux linux Kernel
Linux |
Information
Published : 2025-05-20 16:15
Updated : 2025-11-19 14:43
NVD link : CVE-2025-37900
Mitre link : CVE-2025-37900
CVE.ORG link : CVE-2025-37900
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference