CVE-2026-68325
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.
How to fix
- Linux Linux9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb, e5e0098f8cd82f8b3c8687a8f686309565d51745, afe7ea0520c49586703f210865ace2d70b017e48, 1e31d2394e0db69541b1591d46c5ad6431c81db3, abe5d7962f09adada9c4fb25b816dddd3f97c55d, e5ebe8544df1a1c3611739a8622156094fe470df, 030a8e84f8f1b6e96f469c84a13a225c3699910b, fb80117fddb5b477218dc99bb53911b72c3847f8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < e5e0098f8cd82f8b3c8687a8f686309565d51745, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < afe7ea0520c49586703f210865ace2d70b017e48, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < 1e31d2394e0db69541b1591d46c5ad6431c81db3, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < abe5d7962f09adada9c4fb25b816dddd3f97c55d, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < e5ebe8544df1a1c3611739a8622156094fe470df, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < 030a8e84f8f1b6e96f469c84a13a225c3699910b, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < fb80117fddb5b477218dc99bb53911b72c3847f8, 4.7 | 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb, e5e0098f8cd82f8b3c8687a8f686309565d51745, afe7ea0520c49586703f210865ace2d70b017e48, 1e31d2394e0db69541b1591d46c5ad6431c81db3, abe5d7962f09adada9c4fb25b816dddd3f97c55d, e5ebe8544df1a1c3611739a8622156094fe470df, 030a8e84f8f1b6e96f469c84a13a225c3699910b, fb80117fddb5b477218dc99bb53911b72c3847f8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.