CVE-2026-68325

iommu/amd: Bound the early ACPI HID map

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Bound the early ACPI HID map

The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size.

Check the capacity at the common found label before parsing the HID and UID or writing the entry.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bbAffected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before e5e0098f8cd82f8b3c8687a8f686309565d51745Affected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before afe7ea0520c49586703f210865ace2d70b017e48Affected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before 1e31d2394e0db69541b1591d46c5ad6431c81db3Affected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before abe5d7962f09adada9c4fb25b816dddd3f97c55dAffected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before e5ebe8544df1a1c3611739a8622156094fe470dfAffected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before 030a8e84f8f1b6e96f469c84a13a225c3699910bAffected ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before fb80117fddb5b477218dc99bb53911b72c3847f8Affected
LinuxLinux	4.7Affected before 4.7Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bbAffected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before e5e0098f8cd82f8b3c8687a8f686309565d51745Affected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before afe7ea0520c49586703f210865ace2d70b017e48Affected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before 1e31d2394e0db69541b1591d46c5ad6431c81db3Affected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before abe5d7962f09adada9c4fb25b816dddd3f97c55dAffected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before e5ebe8544df1a1c3611739a8622156094fe470dfAffected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before 030a8e84f8f1b6e96f469c84a13a225c3699910bAffected
ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to before fb80117fddb5b477218dc99bb53911b72c3847f8Affected

LinuxLinux

4.7Affected
before 4.7Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.