AMD Pensando ionic cloud driver for VMware ESXi (heap overflow): Second heap overflow in the ionic ESXi driver

Impact

Second heap overflow in the ionic ESXi driver with the same privilege-escalation and code-execution outcome.

Who can reach it

Local low-privilege access on the ESXi host.

What to do

Apply the AMD driver update per AMD-SB-2001; VIB update plus host reboot.

References

Related entries

• AMD Pensando ionic cloud driver for VMware ESXi (heap overflow): Heap-based buffer overflow in the ionic SmartNICCVE-2025-62624 · AMD Pensando ionic cloud driver for VMware ESXi (heap overflow)High
• Linux kernel (drivers/iommu): This is the substantive fix for stale IOMMU translations of the kernel address spaceCVE-2025-71202 · Linux kernel (drivers/iommu)High
• KubeVirt virt-handler (symlink following in migration proxy): During live migration virt-handler dials Unix socketsCVE-2026-13622 · KubeVirt virt-handler (symlink following in migration proxy)High
• SSSD LDAP sudo provider: unscoped sudoRole search lets any LDAP writer grant themselves root fleet-wideCVE-2026-14474 · SSSD LDAP sudo provider (ldap_sudo_search_base unset)High
• Linux kernel (arch/x86/kvm): An emulated MMIO write that straddles a page boundary onto a second MMIO page is splitCVE-2026-31588 · Linux kernel (arch/x86/kvm)High
• Linux kernel (drivers/iommu/generic_pt): When an unmap lands in the middle of a large or contiguous page-table entryCVE-2026-31735 · Linux kernel (drivers/iommu/generic_pt)High