CVE-2026-68325
iommu/amd: Bound the early ACPI HID map
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.
INFO
Published Date :
Aug. 10, 2026, 1:20 p.m.
Last Modified :
Aug. 10, 2026, 1:20 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2026-68325
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Update the Linux kernel to the latest version.
- Apply the provided patch for the iommu/amd component.
- Verify the fix addresses the ivrs_acpihid command-line parser issue.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-68325.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-68325 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-68325
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-68325 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-68325 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 10, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '1e31d2394e0db69541b1591d46c5ad6431c81db3', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'abe5d7962f09adada9c4fb25b816dddd3f97c55d', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5ebe8544df1a1c3611739a8622156094fe470df', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '030a8e84f8f1b6e96f469c84a13a225c3699910b', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'fb80117fddb5b477218dc99bb53911b72c3847f8', 'versionType': 'git'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.7'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.7', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc5', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry. Added Reference https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b Added Reference https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3 Added Reference https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d Added Reference https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df Added Reference https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8