CVE-2026-68324

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() dmar_latency_disable() intends to zero out only the single latency_statistic entry for the given type, but the memset size was computed as sizeof(*lstat) * DMAR_LATENCY_NUM, which clears the entire array starting from &lstat[type]. When type > 0, this writes beyond the end of the allocated array, corrupting adjacent memory. Fix by using sizeof(*lstat) to clear only the target entry.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Update
  • Linux Linux80f3605991461679c298ea2045c350ee3cf36de3, 104d89cf5b01cb66ff975d91ed42f61b3904df53, 3078d82e7fe9048a2b90a992e71af7cd7ef881fa, 866a35735e56b9dc81cbc33899255134adf6d8b3, d06fea9b85f038690f55e72fe0c45e113715a85a, 0e28ca1c3204b51068579defc904a0dfba5e5c57, 754f8efe45f87e3a9c6871b645b2f9d46d1b407b or later

Affected products

ProductAffected versionsFixed in
Linux Linux55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 80f3605991461679c298ea2045c350ee3cf36de3, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 104d89cf5b01cb66ff975d91ed42f61b3904df53, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 3078d82e7fe9048a2b90a992e71af7cd7ef881fa, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 866a35735e56b9dc81cbc33899255134adf6d8b3, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < d06fea9b85f038690f55e72fe0c45e113715a85a, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 0e28ca1c3204b51068579defc904a0dfba5e5c57, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 754f8efe45f87e3a9c6871b645b2f9d46d1b407b, 5.1480f3605991461679c298ea2045c350ee3cf36de3, 104d89cf5b01cb66ff975d91ed42f61b3904df53, 3078d82e7fe9048a2b90a992e71af7cd7ef881fa, 866a35735e56b9dc81cbc33899255134adf6d8b3, d06fea9b85f038690f55e72fe0c45e113715a85a, 0e28ca1c3204b51068579defc904a0dfba5e5c57, 754f8efe45f87e3a9c6871b645b2f9d46d1b407b

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-68324 · Linux · Dark Radar