IOMMU DMA Cleanup Issue in Linux Kernel - CVE-2025-37877
Summary
CVE-2025-37877: In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommu_device_register() encounters an error, it can end up tearing down already-configured groups and default d... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, managing system resources and facilitating communication between hardware and software. It supports a wide range of hardware architectures and is known for its stability and performance. However, vulnerabilities can arise, such as CVE-2025-37877, which affects the IOMMU (Input-Output Memory Management Unit) subsystem, potentially leading to system instability.
Vulnerability Detail
CVE-2025-37877 is a vulnerability in the Linux kernel's IOMMU subsystem, specifically related to the handling of DMA (Direct Memory Access) operations. When the function iommu_device_register() encounters an error, it may improperly tear down configured groups and default domains without adequately clearing the dev->dma_iommu flag. This inconsistency can lead to devices remaining connected to iommu-dma, which may cause crashes or undefined behavior, especially if the IOMMU driver fails to probe correctly. The vulnerability highlights the need for proper cleanup to ensure system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, ensuring that your system is regularly updated can help mitigate potential risks associated with this issue.
Conclusion
CVE-2025-37877 is a significant vulnerability in the Linux kernel's IOMMU subsystem that can lead to system instability if not addressed. Users are advised to update their systems to the latest patched version to mitigate risks. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37877 is a vulnerability in the Linux kernel's IOMMU subsystem that can lead to system instability if not properly handled during device registration.
If your system's IOMMU driver fails to probe correctly, it may leave devices connected to iommu-dma, potentially causing crashes or undefined behavior.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, a patch is available. Users should update their Linux kernel to the latest version to ensure the vulnerability is addressed.
While there are no specific workarounds, it is crucial to monitor your system for any unusual behavior and plan to update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
