CVE-2026-45862iommu/vt-d: Flush cache for PASID table before using it
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 7e00b52c8cdd9d3a985d63d72ecae7bde6314883 before cd75e77125c8a51754ca4cd60b4ca083ed735d1d; from 5c65f097124770c3e5b9b83ed1a8b68c119bc7b5 before 0616137b70e6d9a547d4b60df8e1b64e36d83661; from 2bed9455db7cc0ab7ece6b3d846472097b52855a before 36990407cdd257473607e33802d00e978af2759e; from 194b3348bdbb7db65375c72f3f774aee4cc6614e before c93f23375d8c410954b0df825e814b632fd62b9d; from 194b3348bdbb7db65375c72f3f774aee4cc6614e before 5962c30a6f05ea1ab73f039e235bb30716243517; from 194b3348bdbb7db65375c72f3f774aee4cc6614e before 36244dfd3853f7bf89d03b8e90d56b23ce7fbc16; from 194b3348bdbb7db65375c72f3f774aee4cc6614e before d15cda135148ea7ba929cfdbcf208182bc29a7aa; 194b3348bdbb7db65375c72f3f774aee4cc6614e builds before 22d169bdd2849fe6bd18c2643742e1c02be6451c; and 7 more ranges | CNA record |
linux linux_kernel linux:linux_kernel | from 5.4.237 before 5.5; from 5.10.175 before 5.10.252; from 5.15.103 before 5.15.202; from 6.1.16 before 6.1.165; from 6.2.3 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4 | NVD |
References
- https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1dpatch
- https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661patch
- https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759epatch
- https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9dpatch
- https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517patch
- https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16patch
- https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aapatch
- https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451cpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.