What’s Vulnerable › Vulnerabilities

CVE-2025-71122: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-14 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller found it could overflow math in the test infrastructure and cause a WARN_ON by corrupting the reserved interval tree. This only effects test kernels with CONFIG_IOMMUFD_TEST. Validate the user input length in the test ioctl.

Affected products

• Linux kernel: from 6.2.1 before 6.6.120; from 6.7 before 6.12.64; from 6.13 before 6.18.3; 6.2, 6.19-rc1, 6.19-rc2, 6.19-rc3, 6.19-rc4, 6.19-rc5 (+3) — fixed in 6.12.64, 6.18.3, 6.6.120

How to fix

Upgrade to a fixed version: Linux kernel 6.12.64, 6.18.3, 6.6.120. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4cc829d61f10c20523fd4085c1546e741a792a97
• https://git.kernel.org/stable/c/b166b8e0a381429fefd9180e67fbc834b3cee82f
• https://git.kernel.org/stable/c/e6a973af11135439de32ece3b9cbe3bfc043bea8
• https://git.kernel.org/stable/c/e6c122cffcbb2e84d321ec8ba0e38ce8e7c10925

Get alerted when CVE-2025-71122 or the next vulnerability affects your stack