CVE-2025-37927 – A buffer overflow vulnerability exists in the L... (How to Fix)

Q: What is the severity of CVE-2025-37927?

CVE-2025-37927 has a CVSS score of 7.8 (HIGH). A buffer overflow vulnerability exists in the Linux kernel's AMD IOMMU driver when parsing ACPI HID/UID strings. This allows local attackers to potentially execute arbitrary code or cause denial-of-service. Systems running affected Linux kernel versions with AMD processors and IOMMU enabled are vulnerable.

📋 TL;DR

A buffer overflow vulnerability exists in the Linux kernel's AMD IOMMU driver when parsing ACPI HID/UID strings. This allows local attackers to potentially execute arbitrary code or cause denial-of-service. Systems running affected Linux kernel versions with AMD processors and IOMMU enabled are vulnerable.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not specified in CVE, but patches available for multiple stable branches

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires AMD processor with IOMMU enabled and ACPI IVRS table parsing.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local privilege escalation to kernel-level code execution, potentially leading to full system compromise.

🟠

Likely Case

Kernel panic or system crash causing denial-of-service.

🟢

If Mitigated

Limited impact if kernel hardening features like KASLR and stack canaries are enabled.

🌐 Internet-Facing: LOW - Requires local access to exploit.

🏢 Internal Only: MEDIUM - Malicious insiders or compromised local accounts could exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access and knowledge of kernel memory layout. No public exploits known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Multiple stable kernel versions with commits: 10d901a95f8e, 13d67528e1ae, 2b65060c84ee, 466d9da26707, 8dee308e4c01

Vendor Advisory: https://git.kernel.org/stable/c/10d901a95f8e766e5aa0bb9a983fb41271f64718

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution's repositories. 2. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable AMD IOMMU

linux

Disable IOMMU functionality in kernel boot parameters

Add 'iommu=off' or 'amd_iommu=off' to kernel command line in /etc/default/grub

🧯 If You Can't Patch

Restrict local user access to systems with AMD processors
Enable kernel hardening features like KASLR and stack protection

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if AMD IOMMU is enabled: 'dmesg | grep -i iommu' and 'uname -r'

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is updated to patched version and check for presence of fix commits

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
IOMMU-related error messages in dmesg
System crash/reboot events

Network Indicators:

None - local vulnerability only

SIEM Query:

Search for kernel panic events or unexpected system reboots on AMD-based systems

📊 Metadata

CVE ID: CVE-2025-37927

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-787

EPSS Score: 0.03% exploit probability (8.2th percentile)

Published: May 20, 2025

Last Updated: November 10, 2025

🔗 References

https://git.kernel.org/stable/c/10d901a95f8e766e5aa0bb9a983fb41271f64718 Patch
https://git.kernel.org/stable/c/13d67528e1ae4486e9ab24b70122fab104c73c29 Patch
https://git.kernel.org/stable/c/2b65060c84ee4d8dc64fae6d2728b528e9e832e1 Patch
https://git.kernel.org/stable/c/466d9da267079a8d3b69fa72dfa3a732e1f6dbb5 Patch
https://git.kernel.org/stable/c/8dee308e4c01dea48fc104d37f92d5b58c50b96c Patch
https://git.kernel.org/stable/c/a65ebfed65fa62797ec1f5f1dcf7adb157a2de1e Patch
https://git.kernel.org/stable/c/c3f37faa71f5d26dd2144b3f2b14525ec8f5e41f Patch
https://git.kernel.org/stable/c/c8bdfc0297965bb13fa439d36ca9c4f7c8447f0f Patch
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html Mailing List,Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Mailing List,Third Party Advisory

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-37927, you might also want to check these: