CVE-2025-38625

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38625
In the Linux kernel, the following vulnerability has been resolved: vfio/pds: Fix missing detach_ioas op When CONFIG_IOMMUFD is enabled and a device is bound to the pds_vfio_pci driver, the following WARN_ON() trace is seen and probe fails: WARNING: CPU: 0 PID: 5040 at drivers/vfio/vfio_main.c:317 __vfio_register_dev+0x130/0x140 [vfio] <...> pds_vfio_pci 0000:08:00.1: probe with driver pds_vfio_pci failed with error -22 This is because the driver's vfio_device_ops.detach_ioas isn't set. Fix this by using the generic vfio_iommufd_physical_detach_ioas function.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1df8150ab4cc422bddfbd312d6758c50b688a971 Patch
https://git.kernel.org/stable/c/7dbfae90c5a33f6b694e7068bc9522cc2655373d Patch
https://git.kernel.org/stable/c/88b962fbd0ac30a65d2869c68d2f145be46ebe4d Patch
https://git.kernel.org/stable/c/b265dff9fcf047f660976a5c92c83e7c414a2d95 Patch
https://git.kernel.org/stable/c/fe24d5bc635e103a517ec201c3cb571eeab8be2f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Nov 2025, 17:05

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1df8150ab4cc422bddfbd312d6758c50b688a971 - () https://git.kernel.org/stable/c/1df8150ab4cc422bddfbd312d6758c50b688a971 - Patch
References () https://git.kernel.org/stable/c/7dbfae90c5a33f6b694e7068bc9522cc2655373d - () https://git.kernel.org/stable/c/7dbfae90c5a33f6b694e7068bc9522cc2655373d - Patch
References () https://git.kernel.org/stable/c/88b962fbd0ac30a65d2869c68d2f145be46ebe4d - () https://git.kernel.org/stable/c/88b962fbd0ac30a65d2869c68d2f145be46ebe4d - Patch
References () https://git.kernel.org/stable/c/b265dff9fcf047f660976a5c92c83e7c414a2d95 - () https://git.kernel.org/stable/c/b265dff9fcf047f660976a5c92c83e7c414a2d95 - Patch
References () https://git.kernel.org/stable/c/fe24d5bc635e103a517ec201c3cb571eeab8be2f - () https://git.kernel.org/stable/c/fe24d5bc635e103a517ec201c3cb571eeab8be2f - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vfio/pds: Se ha corregido la operación detach_ioas que faltaba. Cuando CONFIG_IOMMUFD está habilitado y un dispositivo está enlazado al controlador pds_vfio_pci, se observa el siguiente rastro WARN_ON() y la sonda falla: WARNING: CPU: 0 PID: 5040 at drivers/vfio/vfio_main.c:317 __vfio_register_dev+0x130/0x140 [vfio] &lt;...&gt; pds_vfio_pci 0000:08:00.1: la sonda con el controlador pds_vfio_pci falló con el error -22. Esto se debe a que vfio_device_ops.detach_ioas del controlador no está configurado. Solucione esto usando la función genérica vfio_iommufd_physical_detach_ioas.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

22 Aug 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-22 16:15

Updated : 2025-11-26 17:05

NVD link : CVE-2025-38625

Mitre link : CVE-2025-38625

CVE.ORG link : CVE-2025-38625

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo