CVE-2026-68324
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() dmar_latency_disable() intends to zero out only the single latency_statistic entry for the given type, but the memset size was computed as sizeof(*lstat) * DMAR_LATENCY_NUM, which clears the entire array starting from &lstat[type]. When type > 0, this writes beyond the end of the allocated array, corrupting adjacent memory. Fix by using sizeof(*lstat) to clear only the target entry.
How to fix
- Linux Linux80f3605991461679c298ea2045c350ee3cf36de3, 104d89cf5b01cb66ff975d91ed42f61b3904df53, 3078d82e7fe9048a2b90a992e71af7cd7ef881fa, 866a35735e56b9dc81cbc33899255134adf6d8b3, d06fea9b85f038690f55e72fe0c45e113715a85a, 0e28ca1c3204b51068579defc904a0dfba5e5c57, 754f8efe45f87e3a9c6871b645b2f9d46d1b407b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 80f3605991461679c298ea2045c350ee3cf36de3, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 104d89cf5b01cb66ff975d91ed42f61b3904df53, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 3078d82e7fe9048a2b90a992e71af7cd7ef881fa, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 866a35735e56b9dc81cbc33899255134adf6d8b3, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < d06fea9b85f038690f55e72fe0c45e113715a85a, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 0e28ca1c3204b51068579defc904a0dfba5e5c57, 55ee5e67a59a1b6f388d7a1c7b24022145f47a3e ≤ v < 754f8efe45f87e3a9c6871b645b2f9d46d1b407b, 5.14 | 80f3605991461679c298ea2045c350ee3cf36de3, 104d89cf5b01cb66ff975d91ed42f61b3904df53, 3078d82e7fe9048a2b90a992e71af7cd7ef881fa, 866a35735e56b9dc81cbc33899255134adf6d8b3, d06fea9b85f038690f55e72fe0c45e113715a85a, 0e28ca1c3204b51068579defc904a0dfba5e5c57, 754f8efe45f87e3a9c6871b645b2f9d46d1b407b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.