CVE-2026-45862

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.1 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661
https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c
https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16
https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e
https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517
https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d
https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d
https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa

Configurations

No configuration.

History

30 May 2026, 11:17

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8

27 May 2026, 14:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-27 14:16

Updated : 2026-05-30 11:17

NVD link : CVE-2026-45862

Mitre link : CVE-2026-45862

CVE.ORG link : CVE-2026-45862

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-45862", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.1}]}, "published": "2026-05-27T14:16:58.430", "references": [{"url": "https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush cache for PASID table before using it\n\nWhen writing the address of a freshly allocated zero-initialized PASID\ntable to a PASID directory entry, do that after the CPU cache flush for\nthis PASID table, not before it, to avoid the time window when this\nPASID table may be already used by non-coherent IOMMU hardware while\nits contents in RAM is still some random old data, not zero-initialized."}], "lastModified": "2026-05-30T11:17:14.723", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}