{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68325", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.382Z", "datePublished": "2026-08-10T12:03:01.384Z", "dateUpdated": "2026-08-10T12:03:01.384Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-10T12:03:01.384Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Bound the early ACPI HID map\n\nThe ivrs_acpihid command-line parser appends entries to a fixed\nfour-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET\nparsers, it does not reject a fifth entry before incrementing the map size.\n\nCheck the capacity at the common found label before parsing the HID and\nUID or writing the entry."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/amd/init.c"], "versions": [{"version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "lessThan": "1e31d2394e0db69541b1591d46c5ad6431c81db3", "status": "affected", "versionType": "git"}, {"version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "lessThan": "abe5d7962f09adada9c4fb25b816dddd3f97c55d", "status": "affected", "versionType": "git"}, {"version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "lessThan": "e5ebe8544df1a1c3611739a8622156094fe470df", "status": "affected", "versionType": "git"}, {"version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "lessThan": "030a8e84f8f1b6e96f469c84a13a225c3699910b", "status": "affected", "versionType": "git"}, {"version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "lessThan": "fb80117fddb5b477218dc99bb53911b72c3847f8", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/amd/init.c"], "versions": [{"version": "4.7", "status": "affected"}, {"version": "0", "lessThan": "4.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc5", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "7.2-rc5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3"}, {"url": "https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d"}, {"url": "https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df"}, {"url": "https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b"}, {"url": "https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8"}], "title": "iommu/amd: Bound the early ACPI HID map", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iommu/amd/init.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "1e31d2394e0db69541b1591d46c5ad6431c81db3", "status": "affected", "version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "versionType": "git"}, {"lessThan": "abe5d7962f09adada9c4fb25b816dddd3f97c55d", "status": "affected", "version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "versionType": "git"}, {"lessThan": "e5ebe8544df1a1c3611739a8622156094fe470df", "status": "affected", "version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "versionType": "git"}, {"lessThan": "030a8e84f8f1b6e96f469c84a13a225c3699910b", "status": "affected", "version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "versionType": "git"}, {"lessThan": "fb80117fddb5b477218dc99bb53911b72c3847f8", "status": "affected", "version": "ca3bf5d47cec8b7614bcb2e9132c40081d6d81db", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iommu/amd/init.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.7"}, {"lessThan": "4.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc5", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Bound the early ACPI HID map\n\nThe ivrs_acpihid command-line parser appends entries to a fixed\nfour-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET\nparsers, it does not reject a fifth entry before incrementing the map size.\n\nCheck the capacity at the common found label before parsing the HID and\nUID or writing the entry."}], "id": "CVE-2026-68325", "lastModified": "2026-08-10T13:20:22.667", "metrics": {}, "published": "2026-08-10T13:20:22.667", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: Out-of-bounds write in ivrs_acpihid parser leading to denial of service", "id": "2513390", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513390"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["In the Linux kernel, the following vulnerability has been resolved:\niommu/amd: Bound the early ACPI HID map\nThe ivrs_acpihid command-line parser appends entries to a fixed\nfour-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET\nparsers, it does not reject a fifth entry before incrementing the map size.\nCheck the capacity at the common found label before parsing the HID and\nUID or writing the entry.", "A flaw was found in the Linux kernel's `ivrs_acpihid` command-line parser. This vulnerability occurs because the parser does not properly bound the `early_acpihid_map` array, allowing it to append more entries than its fixed four-element capacity. A local attacker could exploit this out-of-bounds write to cause a denial of service or potentially execute arbitrary code."], "name": "CVE-2026-68325", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux for NVIDIA 26"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-08-10T12:03:01Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68325\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68325\nhttps://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b\nhttps://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3\nhttps://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d\nhttps://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df\nhttps://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca3bf5d47cec8b7614bcb2e9132c40081d6d81db,1e31d2394e0db69541b1591d46c5ad6431c81db3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca3bf5d47cec8b7614bcb2e9132c40081d6d81db,abe5d7962f09adada9c4fb25b816dddd3f97c55d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca3bf5d47cec8b7614bcb2e9132c40081d6d81db,e5ebe8544df1a1c3611739a8622156094fe470df)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca3bf5d47cec8b7614bcb2e9132c40081d6d81db,030a8e84f8f1b6e96f469c84a13a225c3699910b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca3bf5d47cec8b7614bcb2e9132c40081d6d81db,fb80117fddb5b477218dc99bb53911b72c3847f8)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.148,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T17:00:03.763550+00:00", "updated": "2026-08-11T01:00:04.406642+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE\u2011120", "CWE\u2011119"]}