1. Home
  2. Vulnerabilities
  3. CVE-2026-68325
0.0
NA
CVE-2026-68325
iommu/amd: Bound the early ACPI HID map
Overview
Description

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.

Details
INFO

Published Date :

Aug. 10, 2026, 1:20 p.m.

Last Modified :

Aug. 19, 2026, 5:20 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Impact
Affected Products

The following products are affected by CVE-2026-68325 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Apply the Linux kernel patch to fix the out-of-bounds write vulnerability in the ACPI HID parser.
  • Update the Linux kernel to the latest version.
  • Apply the provided patch for the iommu/amd component.
  • Verify the fix addresses the ivrs_acpihid command-line parser issue.
References
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2026-68325.

URL Resource
https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b
https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3
https://git.kernel.org/stable/c/9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb
https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d
https://git.kernel.org/stable/c/afe7ea0520c49586703f210865ace2d70b017e48
https://git.kernel.org/stable/c/e5e0098f8cd82f8b3c8687a8f686309565d51745
https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df
https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-68325 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-68325 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-68325 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2026-68325 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 19, 2026

    Action Type Old Value New Value
    Added Reference https://git.kernel.org/stable/c/9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb
    Added Reference https://git.kernel.org/stable/c/afe7ea0520c49586703f210865ace2d70b017e48
    Added Reference https://git.kernel.org/stable/c/e5e0098f8cd82f8b3c8687a8f686309565d51745
    Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '1e31d2394e0db69541b1591d46c5ad6431c81db3', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'abe5d7962f09adada9c4fb25b816dddd3f97c55d', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5ebe8544df1a1c3611739a8622156094fe470df', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '030a8e84f8f1b6e96f469c84a13a225c3699910b', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'fb80117fddb5b477218dc99bb53911b72c3847f8', 'versionType': 'git'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.7'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.7', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5e0098f8cd82f8b3c8687a8f686309565d51745', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'afe7ea0520c49586703f210865ace2d70b017e48', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '1e31d2394e0db69541b1591d46c5ad6431c81db3', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'abe5d7962f09adada9c4fb25b816dddd3f97c55d', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5ebe8544df1a1c3611739a8622156094fe470df', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '030a8e84f8f1b6e96f469c84a13a225c3699910b', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'fb80117fddb5b477218dc99bb53911b72c3847f8', 'versionType': 'git'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.7'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.7', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.265', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.216', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.183', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'affected'}]
  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 17, 2026

    Action Type Old Value New Value
    Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '1e31d2394e0db69541b1591d46c5ad6431c81db3', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'abe5d7962f09adada9c4fb25b816dddd3f97c55d', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5ebe8544df1a1c3611739a8622156094fe470df', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '030a8e84f8f1b6e96f469c84a13a225c3699910b', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'fb80117fddb5b477218dc99bb53911b72c3847f8', 'versionType': 'git'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.7'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.7', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc5', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '1e31d2394e0db69541b1591d46c5ad6431c81db3', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'abe5d7962f09adada9c4fb25b816dddd3f97c55d', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5ebe8544df1a1c3611739a8622156094fe470df', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '030a8e84f8f1b6e96f469c84a13a225c3699910b', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'fb80117fddb5b477218dc99bb53911b72c3847f8', 'versionType': 'git'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.7'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.7', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'affected'}]
  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 10, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '1e31d2394e0db69541b1591d46c5ad6431c81db3', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'abe5d7962f09adada9c4fb25b816dddd3f97c55d', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'e5ebe8544df1a1c3611739a8622156094fe470df', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': '030a8e84f8f1b6e96f469c84a13a225c3699910b', 'versionType': 'git'}, {'status': 'affected', 'version': 'ca3bf5d47cec8b7614bcb2e9132c40081d6d81db', 'lessThan': 'fb80117fddb5b477218dc99bb53911b72c3847f8', 'versionType': 'git'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.7'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.7', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc5', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iommu/amd/init.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.
    Added Reference https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b
    Added Reference https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3
    Added Reference https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d
    Added Reference https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df
    Added Reference https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CVSS
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.