CVE-2026-68325iommu/amd: Bound the early ACPI HID map
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before e5e0098f8cd82f8b3c8687a8f686309565d51745; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before afe7ea0520c49586703f210865ace2d70b017e48; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before 1e31d2394e0db69541b1591d46c5ad6431c81db3; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before abe5d7962f09adada9c4fb25b816dddd3f97c55d; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before e5ebe8544df1a1c3611739a8622156094fe470df; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before 030a8e84f8f1b6e96f469c84a13a225c3699910b; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before fb80117fddb5b477218dc99bb53911b72c3847f8 | CNA record |
References
- https://git.kernel.org/stable/c/9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb
- https://git.kernel.org/stable/c/e5e0098f8cd82f8b3c8687a8f686309565d51745
- https://git.kernel.org/stable/c/afe7ea0520c49586703f210865ace2d70b017e48
- https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3
- https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d
- https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df
- https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b
- https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.