)]}'
{
  "commit": "15fd269cbaf8aa5f8f789db43e9a49c81fc9f3ab",
  "tree": "1bee0f02b65b6cbed537b314709609dc329a530a",
  "parents": [
    "63514cac0bb36911759fd907b87c654e5fed76d7"
  ],
  "author": {
    "name": "Kees Cook",
    "email": "kees@kernel.org",
    "time": "Mon Aug 04 08:40:27 2025 -0700"
  },
  "committer": {
    "name": "Kevin Berry",
    "email": "kpberry@google.com",
    "time": "Fri Sep 05 16:27:46 2025 -0700"
  },
  "message": "iommu/amd: Avoid stack buffer overflow from kernel cmdline\n\n[ Upstream commit 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec ]\n\nWhile the kernel command line is considered trusted in most environments,\navoid writing 1 byte past the end of \"acpiid\" if the \"str\" argument is\nmaximum length.\n\nBUG\u003db/441465894\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2025-38676 in the Linux kernel.\n\ncos-patch: security-moderate\nReported-by: Simcha Kosman \u003csimcha.kosman@cyberark.com\u003e\nCloses: https://lore.kernel.org/all/AS8P193MB2271C4B24BCEDA31830F37AE84A52@AS8P193MB2271.EURP193.PROD.OUTLOOK.COM\nFixes: b6b26d86c61c (\"iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter\")\nChange-Id: Ice18f80db302947f5e048c275a13fcc01971f3e1\nSigned-off-by: Kees Cook \u003ckees@kernel.org\u003e\nReviewed-by: Ankit Soni \u003cAnkit.Soni@amd.com\u003e\nLink: https://lore.kernel.org/r/20250804154023.work.970-kees@kernel.org\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Kevin Berry \u003ckpberry@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/110663\nReviewed-by: Miri Amarilio \u003cmirilio@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Shuo Yang \u003cgshuoy@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ff11cd7e5c068c9cedc9ed1f773dc75050c4e7ac",
      "old_mode": 33188,
      "old_path": "drivers/iommu/amd/init.c",
      "new_id": "f5b544e0f230bc1c976924b406df4c24391d3c41",
      "new_mode": 33188,
      "new_path": "drivers/iommu/amd/init.c"
    }
  ]
}