)]}'
{
  "commit": "7415e491350efbbbae38329dd16ecd79204ebe04",
  "tree": "76b1fa75cf5f600604f1302d6c7cef106624d293",
  "parents": [
    "628bf4c0c4ef07eb4b784594341f6a46025c4a7b"
  ],
  "author": {
    "name": "Kees Cook",
    "email": "kees@kernel.org",
    "time": "Mon Aug 04 08:40:27 2025 -0700"
  },
  "committer": {
    "name": "Kevin Berry",
    "email": "kpberry@google.com",
    "time": "Fri Sep 05 15:35:07 2025 -0700"
  },
  "message": "iommu/amd: Avoid stack buffer overflow from kernel cmdline\n\n[ Upstream commit 8503d0fcb1086a7cfe26df67ca4bd9bd9e99bdec ]\n\nWhile the kernel command line is considered trusted in most environments,\navoid writing 1 byte past the end of \"acpiid\" if the \"str\" argument is\nmaximum length.\n\nBUG\u003db/441465778\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2025-38676 in the Linux kernel.\n\ncos-patch: security-moderate\nReported-by: Simcha Kosman \u003csimcha.kosman@cyberark.com\u003e\nCloses: https://lore.kernel.org/all/AS8P193MB2271C4B24BCEDA31830F37AE84A52@AS8P193MB2271.EURP193.PROD.OUTLOOK.COM\nFixes: b6b26d86c61c (\"iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter\")\nChange-Id: I2b181b13cac1e83b30b8a6834907f8b5e89bb44e\nSigned-off-by: Kees Cook \u003ckees@kernel.org\u003e\nReviewed-by: Ankit Soni \u003cAnkit.Soni@amd.com\u003e\nLink: https://lore.kernel.org/r/20250804154023.work.970-kees@kernel.org\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Kevin Berry \u003ckpberry@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/110662\nReviewed-by: Miri Amarilio \u003cmirilio@google.com\u003e\nReviewed-by: Shuo Yang \u003cgshuoy@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "bc78e866555168151c1d50ef4f49e6a0ae4dfed2",
      "old_mode": 33188,
      "old_path": "drivers/iommu/amd/init.c",
      "new_id": "23804270eda191470fb72f6781fc15adde1a9354",
      "new_mode": 33188,
      "new_path": "drivers/iommu/amd/init.c"
    }
  ]
}