CVEvulnerability
CVE-2026-45862
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-05-27
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-362
Description
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Flush cache for PASID table before using it
When writing the address of a freshly allocated zero-initialized PASID
table to a PASID directory entry, do that after the CPU cache flush for
this PASID table, not before it, to avoid the time window when this
PASID table may be already used by non-coherent IOMMU hardware while
its contents in RAM is still some random old data, not zero-initialized.
Affected configurations
• linux linux kernel (>= 5.4.237 < 5.5)
• linux linux kernel (>= 5.10.175 < 5.10.252)
• linux linux kernel (>= 5.15.103 < 5.15.202)
• linux linux kernel (>= 6.1.16 < 6.1.165)
• linux linux kernel (>= 6.2.3 < 6.6.128)
• linux linux kernel (>= 6.7 < 6.12.75)
• linux linux kernel (>= 6.13 < 6.18.14)
• linux linux kernel (>= 6.19 < 6.19.4)
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661 Patch
- https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c Patch
- https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16 Patch
- https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e Patch
- https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517 Patch
- https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d Patch
- https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d Patch
- https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa Patch