CVE-2026-45862

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.1 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661	Patch
https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c	Patch
https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16	Patch
https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e	Patch
https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517	Patch
https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d	Patch
https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d	Patch
https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

No history.

Information

Published : 2026-05-27 14:16

Updated : 2026-06-25 21:07

NVD link : CVE-2026-45862

Mitre link : CVE-2026-45862

CVE.ORG link : CVE-2026-45862

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-45862", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.1}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7e00b52c8cdd9d3a985d63d72ecae7bde6314883", "lessThan": "cd75e77125c8a51754ca4cd60b4ca083ed735d1d", "versionType": "git"}, {"status": "affected", "version": "5c65f097124770c3e5b9b83ed1a8b68c119bc7b5", "lessThan": "0616137b70e6d9a547d4b60df8e1b64e36d83661", "versionType": "git"}, {"status": "affected", "version": "2bed9455db7cc0ab7ece6b3d846472097b52855a", "lessThan": "36990407cdd257473607e33802d00e978af2759e", "versionType": "git"}, {"status": "affected", "version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "c93f23375d8c410954b0df825e814b632fd62b9d", "versionType": "git"}, {"status": "affected", "version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "5962c30a6f05ea1ab73f039e235bb30716243517", "versionType": "git"}, {"status": "affected", "version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "36244dfd3853f7bf89d03b8e90d56b23ce7fbc16", "versionType": "git"}, {"status": "affected", "version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "d15cda135148ea7ba929cfdbcf208182bc29a7aa", "versionType": "git"}, {"status": "affected", "version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "22d169bdd2849fe6bd18c2643742e1c02be6451c", "versionType": "git"}, {"status": "affected", "version": "1b48c70feefc499b62670521efa002ab01e05df5", "versionType": "git"}, {"status": "affected", "version": "bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf", "versionType": "git"}, {"status": "affected", "version": "5.10.175", "lessThan": "5.10.252", "versionType": "semver"}, {"status": "affected", "version": "5.15.103", "lessThan": "5.15.202", "versionType": "semver"}, {"status": "affected", "version": "6.1.16", "lessThan": "6.1.165", "versionType": "semver"}, {"status": "affected", "version": "5.4.237", "lessThan": "5.5", "versionType": "semver"}, {"status": "affected", "version": "6.2.3", "lessThan": "6.3", "versionType": "semver"}], "programFiles": ["drivers/iommu/intel/pasid.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.3"}, {"status": "unaffected", "version": "0", "lessThan": "6.3", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.14", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.4", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/iommu/intel/pasid.c"], "defaultStatus": "affected"}]}], "published": "2026-05-27T14:16:58.430", "references": [{"url": "https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush cache for PASID table before using it\n\nWhen writing the address of a freshly allocated zero-initialized PASID\ntable to a PASID directory entry, do that after the CPU cache flush for\nthis PASID table, not before it, to avoid the time window when this\nPASID table may be already used by non-coherent IOMMU hardware while\nits contents in RAM is still some random old data, not zero-initialized."}], "lastModified": "2026-06-25T21:07:19.617", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C125C6E-3E7A-4A75-979B-04AAAD410EF7", "versionEndExcluding": "5.5", "versionStartIncluding": "5.4.237"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08B1EE9B-280F-4E7A-941C-5D9AC948616D", "versionEndExcluding": "5.10.252", "versionStartIncluding": "5.10.175"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81778946-C492-4AEA-B80D-4A2EA8967C18", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.15.103"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B497E7DA-EBA6-438A-9E90-86E7682FC30E", "versionEndExcluding": "6.1.165", "versionStartIncluding": "6.1.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CAC007F-FFC8-4A3B-9BB5-FC3935D31949", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.2.3"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF463CB7-1F58-4607-B847-77ED23E4B9B7", "versionEndExcluding": "6.18.14", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "672A3E79-EC03-479D-8503-361DFBDC8092", "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}