CVE-2026-68325

iommu/amd: Bound the early ACPI HID map

N/A

Published: August 10, 2026 at 12:03 PM UTC

Updated: August 19, 2026 at 05:20 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.7 ≤ v < 5.10.2654.7 ≤ v < 5.15.2164.7 ≤ v < 6.1.1834.7 ≤ v < 6.12.1014.7 ≤ v < 6.18.424.7 ≤ v < 6.6.1484.7 ≤ v < 7.1.64.7 ≤ v < 7.24.7ca3bf5d47cec8b7614bcb2e9132c40081d6d81db

Vendor states this is fixed in 030a8e84f8f1b6e96f469c84a13a225c3699910b (fixed)

Vendor states this is fixed in 1e31d2394e0db69541b1591d46c5ad6431c81db3 (fixed)

Vendor states this is fixed in 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb (fixed)

Vendor states this is fixed in abe5d7962f09adada9c4fb25b816dddd3f97c55d (fixed)

Vendor states this is fixed in afe7ea0520c49586703f210865ace2d70b017e48 (fixed)

Vendor states this is fixed in e5e0098f8cd82f8b3c8687a8f686309565d51745 (fixed)

Vendor states this is fixed in e5ebe8544df1a1c3611739a8622156094fe470df (fixed)

Vendor states this is fixed in fb80117fddb5b477218dc99bb53911b72c3847f8 (fixed)

Vendor states this is fixed in 4.7 (unaffected)

Vendor states this is fixed in 5.10.265 (unaffected)

Vendor states this is fixed in 5.15.216 (unaffected)

Vendor states this is fixed in 6.1.183 (unaffected)