CVE-2026-45862iommu/vt-d: Flush cache for PASID table before using it
- 7.8HighCVSS base score
- 0.13%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.
Timeline
ID reserved
By Linux
- 14 days later
· 14 days later
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.13% · top 97% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 7e00b52c8cdd9d3a985d63d72ecae7bde6314883 – < cd75e77125c8a51754ca4cd60b4ca083ed735d1d
- affected 5c65f097124770c3e5b9b83ed1a8b68c119bc7b5 – < 0616137b70e6d9a547d4b60df8e1b64e36d83661
- affected 2bed9455db7cc0ab7ece6b3d846472097b52855a – < 36990407cdd257473607e33802d00e978af2759e
- affected 194b3348bdbb7db65375c72f3f774aee4cc6614e – < c93f23375d8c410954b0df825e814b632fd62b9d
- affected 194b3348bdbb7db65375c72f3f774aee4cc6614e – < 5962c30a6f05ea1ab73f039e235bb30716243517
- affected 194b3348bdbb7db65375c72f3f774aee4cc6614e – < 36244dfd3853f7bf89d03b8e90d56b23ce7fbc16
- affected 194b3348bdbb7db65375c72f3f774aee4cc6614e – < d15cda135148ea7ba929cfdbcf208182bc29a7aa
- affected 194b3348bdbb7db65375c72f3f774aee4cc6614e – < 22d169bdd2849fe6bd18c2643742e1c02be6451c
- affected 1b48c70feefc499b62670521efa002ab01e05df5
- affected bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf
- affected 5.10.175 – < 5.10.252
- affected 5.15.103 – < 5.15.202
- affected 6.1.16 – < 6.1.165
- affected 5.4.237 – < 5.5
- affected 6.2.3 – < 6.3
- affected 6.3
- unaffected < 6.3
- unaffected 5.10.252 – ≤ 5.10.*
- unaffected 5.15.202 – ≤ 5.15.*
- unaffected 6.1.165 – ≤ 6.1.*
- unaffected 6.6.128 – ≤ 6.6.*
- unaffected 6.12.75 – ≤ 6.12.*
- unaffected 6.18.14 – ≤ 6.18.*
- unaffected 6.19.4 – ≤ 6.19.*
- unaffected 7.0 – ≤ *
References
References8
- https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d (opens in a new tab)
- https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661 (opens in a new tab)
- https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e (opens in a new tab)
- https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d (opens in a new tab)
- https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517 (opens in a new tab)
- https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16 (opens in a new tab)
- https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa (opens in a new tab)
- https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-32328 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-45862)Record last updated .