Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2025-71122: Linux kernel test code may crash from overflow

CVE-2025-71122 · published 9 months ago
Summary

A testing component in the Linux kernel could miscalculate a value, leading to a warning and possible crash when the test is run. This affects Linux kernel builds that include the IOMMUFD test feature, such as standard Linux kernels and certain Debian and Ubuntu variants. Update to the latest kernel packages that contain the fix, or disable the IOMMUFD test configuration if it is not needed.

What to do
  • Update debian linux to version 6.12.69-1.
  • Update debian linux to version 6.18.3-1.
  • Update canonical linux-aws-6.8 to version 6.8.0-1052.55~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1059.65~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1054.57~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-110.110~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1051.51~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-110.110.1~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1051.54~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1049.50~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-110.110~22.04.1.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1047.48~22.04.1.
  • Update canonical linux to version 6.8.0-110.110.
  • Update canonical linux-aws to version 6.8.0-1052.55.
  • Update canonical linux-aws-6.17 to version 6.17.0-1012.12~24.04.1.
  • Update canonical linux-azure to version 6.8.0-1054.60.
  • Update canonical linux-azure-6.17 to version 6.17.0-1013.13~24.04.1.
  • Update canonical linux-gcp to version 6.8.0-1054.57.
  • Update canonical linux-gcp-6.17 to version 6.17.0-1012.12~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1050.56.
  • Update canonical linux-gkeop to version 6.8.0-1037.40.
  • Update canonical linux-hwe-6.17 to version 6.17.0-22.22~24.04.1.
  • Update canonical linux-ibm to version 6.8.0-1051.51.
  • Update canonical linux-lowlatency to version 6.8.0-110.110.1.
  • Update canonical linux-nvidia to version 6.8.0-1051.54.
  • Update canonical linux-nvidia-6.17 to version 6.17.0-1018.18.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1051.54.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1022.22.
  • Update canonical linux-oem-6.17 to version 6.17.0-1020.20.
  • Update canonical linux-oracle to version 6.8.0-1049.50.
  • Update canonical linux-oracle-6.17 to version 6.17.0-1011.11~24.04.1.
  • Update canonical linux-raspi to version 6.8.0-1052.56.
  • Update canonical linux-riscv-6.17 to version 6.17.0-22.22.1~24.04.1.
  • Update canonical linux-xilinx to version 6.8.0-1028.29.
  • Update canonical linux-aws-fips to version 6.8.0-1052.55+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1053.59+fips1.
  • Update canonical linux-fips to version 6.8.0-110.110+fips2.
  • Update canonical linux-gcp-fips to version 6.8.0-1054.57+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2042.43.
  • Update canonical linux-realtime to version 6.8.1-1047.48.
  • Update canonical linux-realtime-6.17 to version 6.17.0-1010.11~24.04.1.
  • Update canonical linux to version 6.17.0-22.22.
  • Update canonical linux-aws to version 6.17.0-1012.12.
  • Update canonical linux-azure to version 6.17.0-1013.13.
  • Update canonical linux-gcp to version 6.17.0-1012.12.
  • Update canonical linux-oracle to version 6.17.0-1011.11.
  • Update canonical linux-raspi to version 6.17.0-1013.13.
  • Update canonical linux-realtime to version 6.17.0-1010.11.
  • Update canonical linux-riscv to version 6.17.0-22.22.1.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
  • Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
  • Update canonical linux-azure-fde to version 6.8.0-1058.65.
  • Update canonical linux-bluefield to version 6.8.0-1017.21.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update linux to version 6.8.0-147.147.aikido.90.
  • Update rootio-linux to version 6.8.0-147.147.aikido.90.
  • Update linux kernel to version 6.18.3.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 6.2.1, < 6.6.120
>= 6.7, < 6.12.64
>= 6.13, < 6.18.3
6.2
6.19
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Debian:13 debian linux < 6.12.69-1
Fix: upgrade to 6.12.69-1
Debian:14 debian linux < 6.18.3-1
Fix: upgrade to 6.18.3-1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Showing 50 of 157. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1052.55~22.04.1
Fix: upgrade to 6.8.0-1052.55~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1059.65~22.04.1
Fix: upgrade to 6.8.0-1059.65~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 < 6.8.0-1058.65~22.04.1
Fix: upgrade to 6.8.0-1058.65~22.04.1
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1054.57~22.04.1
Fix: upgrade to 6.8.0-1054.57~22.04.1
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-110.110~22.04.1
Fix: upgrade to 6.8.0-110.110~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1051.51~22.04.1
Fix: upgrade to 6.8.0-1051.51~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-110.110.1~22.04.1
Fix: upgrade to 6.8.0-110.110.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1051.54~22.04.1
Fix: upgrade to 6.8.0-1051.54~22.04.1
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1049.50~22.04.1
Fix: upgrade to 6.8.0-1049.50~22.04.1
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-110.110~22.04.1
Fix: upgrade to 6.8.0-110.110~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1047.48~22.04.1
Fix: upgrade to 6.8.1-1047.48~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-110.110
Fix: upgrade to 6.8.0-110.110
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1052.55
Fix: upgrade to 6.8.0-1052.55
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 < 6.17.0-1012.12~24.04.1
Fix: upgrade to 6.17.0-1012.12~24.04.1
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1054.60
Fix: upgrade to 6.8.0-1054.60
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.17 < 6.17.0-1013.13~24.04.1
Fix: upgrade to 6.17.0-1013.13~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-fde < 6.8.0-1058.65
Fix: upgrade to 6.8.0-1058.65
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1054.57
Fix: upgrade to 6.8.0-1054.57
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.17 < 6.17.0-1012.12~24.04.1
Fix: upgrade to 6.17.0-1012.12~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1050.56
Fix: upgrade to 6.8.0-1050.56
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1037.40
Fix: upgrade to 6.8.0-1037.40
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.17 < 6.17.0-22.22~24.04.1
Fix: upgrade to 6.17.0-22.22~24.04.1
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1051.51
Fix: upgrade to 6.8.0-1051.51
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-110.110.1
Fix: upgrade to 6.8.0-110.110.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1051.54
Fix: upgrade to 6.8.0-1051.54
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.17 < 6.17.0-1018.18
Fix: upgrade to 6.17.0-1018.18
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1051.54.1
Fix: upgrade to 6.8.0-1051.54.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1022.22
Fix: upgrade to 6.8.0-1022.22
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.17 < 6.17.0-1020.20
Fix: upgrade to 6.17.0-1020.20
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1049.50
Fix: upgrade to 6.8.0-1049.50
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.17 < 6.17.0-1011.11~24.04.1
Fix: upgrade to 6.17.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1052.56
Fix: upgrade to 6.8.0-1052.56
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.17 < 6.17.0-22.22.1~24.04.1
Fix: upgrade to 6.17.0-22.22.1~24.04.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1028.29
Fix: upgrade to 6.8.0-1028.29
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1017.21
Fix: upgrade to 6.8.0-1017.21
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1052.55+fips1
Fix: upgrade to 6.8.0-1052.55+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1053.59+fips1
Fix: upgrade to 6.8.0-1053.59+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-110.110+fips2
Fix: upgrade to 6.8.0-110.110+fips2
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1054.57+fips1
Fix: upgrade to 6.8.0-1054.57+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2042.43
Fix: upgrade to 6.8.0-2042.43
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1047.48
Fix: upgrade to 6.8.1-1047.48
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 < 6.17.0-1010.11~24.04.1
Fix: upgrade to 6.17.0-1010.11~24.04.1
Ubuntu:25.10 canonical linux < 6.17.0-22.22
Fix: upgrade to 6.17.0-22.22
Ubuntu:25.10 canonical linux-aws < 6.17.0-1012.12
Fix: upgrade to 6.17.0-1012.12
Ubuntu:25.10 canonical linux-azure < 6.17.0-1013.13
Fix: upgrade to 6.17.0-1013.13
Ubuntu:25.10 canonical linux-azure-fde All versions
Ubuntu:25.10 canonical linux-gcp < 6.17.0-1012.12
Fix: upgrade to 6.17.0-1012.12
Ubuntu:25.10 canonical linux-oracle < 6.17.0-1011.11
Fix: upgrade to 6.17.0-1011.11
Ubuntu:25.10 canonical linux-raspi < 6.17.0-1013.13
Fix: upgrade to 6.17.0-1013.13
Ubuntu:25.10 canonical linux-realtime < 6.17.0-1010.11
Fix: upgrade to 6.17.0-1010.11
Ubuntu:25.10 canonical linux-riscv < 6.17.0-22.22.1
Fix: upgrade to 6.17.0-22.22.1
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-136.136.root.io.83
Fix: upgrade to 6.8.0-136.136.root.io.83
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Linux linux kernel >= 6.13.0, < 6.18.3
Fix: upgrade to 6.18.3
Original advisory text
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
In the Linux kernel, the following vulnerability has been resolved:

iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

syzkaller found it could overflow math in the test infrastructure and
cause a WARN_ON by corrupting the reserved interval tree. This only
effects test kernels with CONFIG_IOMMUFD_TEST.

Validate the user input length in the test ioctl.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published14 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta