CVE-2025-38676: 
Linux Kernel vulnerability analysis and mitigation

A stack buffer overflow vulnerability was discovered in the Linux kernel's AMD IOMMU driver (CVE-2025-38676). The vulnerability was identified on August 26, 2025, and affects the kernel command line parsing functionality. While the kernel command line is typically considered trusted in most environments, the vulnerability could allow writing 1 byte past the end of the 'acpiid' buffer if the 'str' argument is at maximum length (NVD).

The vulnerability exists in the AMD IOMMU driver's command line parsing functionality. It specifically involves a potential buffer overflow condition where input validation does not properly check the boundary conditions when handling the 'str' argument at maximum length, allowing a 1-byte overflow past the 'acpiid' buffer (Ubuntu).

The vulnerability affects multiple Linux distributions and versions, including Ubuntu 25.04, 24.04 LTS, and 22.04 LTS. Various kernel packages are impacted, including linux-aws, linux-azure, linux-gcp, and other cloud-specific kernel variants (Ubuntu).

Multiple Linux distributions have marked this vulnerability for security updates. Ubuntu has identified affected packages and is tracking the vulnerability status across different releases. Some older versions (18.04 LTS, 16.04 LTS, 14.04 LTS) are marked as not affected (Ubuntu).