CVE-2026-68325: iommu/amd: Bound the early ACPI HID map
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Bound the early ACPI HID map
The ivrsacpihid command-line parser appends entries to a fixed four-element earlyacpihidmap array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size.
Check the capacity at the common found label before parsing the HID and UID or writing the entry.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68325?
CVE-2026-68325 has a risk score of 34.
How do I fix CVE-2026-68325?
To fix CVE-2026-68325, upgrade to a patched version of the Linux kernel that resolves this vulnerability.
What systems are affected by CVE-2026-68325?
CVE-2026-68325 affects systems running affected versions of the Linux kernel with the specific implementation of the ivrs_acpihid command-line parser.
When was CVE-2026-68325 published?
CVE-2026-68325 was published on August 10, 2026.
What is the nature of CVE-2026-68325?
CVE-2026-68325 is a vulnerability in the Linux kernel related to improper handling of the early ACPI HID map.