What’s Vulnerable › Vulnerabilities

CVE-2026-45862: iommu/vt-d: Flush cache for PASID table before using it

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-27 · updated 2026-10-19
• Weakness: CWE-362

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.

Affected products

• Linux kernel: from 5.4.237 before 5.5; from 5.10.175 before 5.10.252; from 5.15.103 before 5.15.202; from 6.1.16 before 6.1.165; from 6.2.3 before 6.6.128; from 6.7 before 6.12.75 — fixed in 5.10.252, 5.15.202, 5.5, 6.1.165, 6.12.75, 6.18.14

How to fix

Upgrade to a fixed version: Linux kernel 5.10.252, 5.15.202, 5.5, 6.1.165. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661
• https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c
• https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16
• https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e
• https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517
• https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d
• https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d
• https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa

Get alerted when CVE-2026-45862 or the next vulnerability affects your stack