CVE-2026-68325 PUBLISHED

iommu/amd: Bound the early ACPI HID map

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Bound the early ACPI HID map

The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size.

Check the capacity at the common found label before parsing the HID and UID or writing the entry.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to 1e31d2394e0db69541b1591d46c5ad6431c81db3 (excl.)
  • affected from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to abe5d7962f09adada9c4fb25b816dddd3f97c55d (excl.)
  • affected from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to e5ebe8544df1a1c3611739a8622156094fe470df (excl.)
  • affected from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to 030a8e84f8f1b6e96f469c84a13a225c3699910b (excl.)
  • affected from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db to fb80117fddb5b477218dc99bb53911b72c3847f8 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.7 is affected
  • unaffected from 0 to 4.7 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References