CVE-2026-45862

iommu/vt-d: Flush cache for PASID table before using it

State: Published
Severity: 7.8 High
Published: May 27, 2026
Updated: Oct 19, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Flush cache for PASID table before using it

When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	7e00b52c8cdd9d3a985d63d72ecae7bde6314883 to before cd75e77125c8a51754ca4cd60b4ca083ed735d1dAffected 5c65f097124770c3e5b9b83ed1a8b68c119bc7b5 to before 0616137b70e6d9a547d4b60df8e1b64e36d83661Affected 2bed9455db7cc0ab7ece6b3d846472097b52855a to before 36990407cdd257473607e33802d00e978af2759eAffected 194b3348bdbb7db65375c72f3f774aee4cc6614e to before c93f23375d8c410954b0df825e814b632fd62b9dAffected 194b3348bdbb7db65375c72f3f774aee4cc6614e to before 5962c30a6f05ea1ab73f039e235bb30716243517Affected 194b3348bdbb7db65375c72f3f774aee4cc6614e to before 36244dfd3853f7bf89d03b8e90d56b23ce7fbc16Affected 194b3348bdbb7db65375c72f3f774aee4cc6614e to before d15cda135148ea7ba929cfdbcf208182bc29a7aaAffected 194b3348bdbb7db65375c72f3f774aee4cc6614e to before 22d169bdd2849fe6bd18c2643742e1c02be6451cAffected 1b48c70feefc499b62670521efa002ab01e05df5Affected bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbfAffected 5.10.175 to before 5.10.252Affected 5.15.103 to before 5.15.202Affected 6.1.16 to before 6.1.165Affected 5.4.237 to before 5.5Affected 6.2.3 to before 6.3Affected
LinuxLinux	6.3Affected before 6.3Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.14 through 6.18.Not affected 6.19.4 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

7e00b52c8cdd9d3a985d63d72ecae7bde6314883 to before cd75e77125c8a51754ca4cd60b4ca083ed735d1dAffected
5c65f097124770c3e5b9b83ed1a8b68c119bc7b5 to before 0616137b70e6d9a547d4b60df8e1b64e36d83661Affected
2bed9455db7cc0ab7ece6b3d846472097b52855a to before 36990407cdd257473607e33802d00e978af2759eAffected
194b3348bdbb7db65375c72f3f774aee4cc6614e to before c93f23375d8c410954b0df825e814b632fd62b9dAffected
194b3348bdbb7db65375c72f3f774aee4cc6614e to before 5962c30a6f05ea1ab73f039e235bb30716243517Affected
194b3348bdbb7db65375c72f3f774aee4cc6614e to before 36244dfd3853f7bf89d03b8e90d56b23ce7fbc16Affected
194b3348bdbb7db65375c72f3f774aee4cc6614e to before d15cda135148ea7ba929cfdbcf208182bc29a7aaAffected
194b3348bdbb7db65375c72f3f774aee4cc6614e to before 22d169bdd2849fe6bd18c2643742e1c02be6451cAffected
1b48c70feefc499b62670521efa002ab01e05df5Affected
bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbfAffected
5.10.175 to before 5.10.252Affected
5.15.103 to before 5.15.202Affected
6.1.16 to before 6.1.165Affected
5.4.237 to before 5.5Affected
6.2.3 to before 6.3Affected

LinuxLinux

6.3Affected
before 6.3Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.14 through 6.18.*Not affected
6.19.4 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.