CVE-2026-45862
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Modified
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-05-27 14:16:58.430000
Last modified
2026-10-19 20:18:20.473000
View original CVE JSON
{
"id": "CVE-2026-45862",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-05-27T14:16:58.430",
"lastModified": "2026-10-19T20:18:20.473",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush cache for PASID table before using it\n\nWhen writing the address of a freshly allocated zero-initialized PASID\ntable to a PASID directory entry, do that after the CPU cache flush for\nthis PASID table, not before it, to avoid the time window when this\nPASID table may be already used by non-coherent IOMMU hardware while\nits contents in RAM is still some random old data, not zero-initialized."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/iommu/intel/pasid.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "7e00b52c8cdd9d3a985d63d72ecae7bde6314883",
"lessThan": "cd75e77125c8a51754ca4cd60b4ca083ed735d1d",
"versionType": "git",
"status": "affected"
},
{
"version": "5c65f097124770c3e5b9b83ed1a8b68c119bc7b5",
"lessThan": "0616137b70e6d9a547d4b60df8e1b64e36d83661",
"versionType": "git",
"status": "affected"
},
{
"version": "2bed9455db7cc0ab7ece6b3d846472097b52855a",
"lessThan": "36990407cdd257473607e33802d00e978af2759e",
"versionType": "git",
"status": "affected"
},
{
"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e",
"lessThan": "c93f23375d8c410954b0df825e814b632fd62b9d",
"versionType": "git",
"status": "affected"
},
{
"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e",
"lessThan": "5962c30a6f05ea1ab73f039e235bb30716243517",
"versionType": "git",
"status": "affected"
},
{
"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e",
"lessThan": "36244dfd3853f7bf89d03b8e90d56b23ce7fbc16",
"versionType": "git",
"status": "affected"
},
{
"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e",
"lessThan": "d15cda135148ea7ba929cfdbcf208182bc29a7aa",
"versionType": "git",
"status": "affected"
},
{
"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e",
"lessThan": "22d169bdd2849fe6bd18c2643742e1c02be6451c",
"versionType": "git",
"status": "affected"
},
{
"version": "1b48c70feefc499b62670521efa002ab01e05df5",
"versionType": "git",
"status": "affected"
},
{
"version": "bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf",
"versionType": "git",
"status": "affected"
},
{
"version": "5.10.175",
"lessThan": "5.10.252",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.15.103",
"lessThan": "5.15.202",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.1.16",
"lessThan": "6.1.165",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.4.237",
"lessThan": "5.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.2.3",
"lessThan": "6.3",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/iommu/intel/pasid.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "6.3",
"status": "affected"
},
{
"version": "0",
"lessThan": "6.3",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.252",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.202",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.165",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.128",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.75",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.14",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.19.4",
"lessThanOrEqual": "6.19.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.0",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.1,
"impactScore": 6.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-16T15:18:13.638562Z",
"id": "CVE-2026-45862",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.237",
"versionEndExcluding": "5.5",
"matchCriteriaId": "0C125C6E-3E7A-4A75-979B-04AAAD410EF7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.175",
"versionEndExcluding": "5.10.252",
"matchCriteriaId": "08B1EE9B-280F-4E7A-941C-5D9AC948616D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.103",
"versionEndExcluding": "5.15.202",
"matchCriteriaId": "81778946-C492-4AEA-B80D-4A2EA8967C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.16",
"versionEndExcluding": "6.1.165",
"matchCriteriaId": "B497E7DA-EBA6-438A-9E90-86E7682FC30E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2.3",
"versionEndExcluding": "6.6.128",
"matchCriteriaId": "7CAC007F-FFC8-4A3B-9BB5-FC3935D31949"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.12.75",
"matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.18.14",
"matchCriteriaId": "BF463CB7-1F58-4607-B847-77ED23E4B9B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.19",
"versionEndExcluding": "6.19.4",
"matchCriteriaId": "672A3E79-EC03-479D-8503-361DFBDC8092"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}