Not yet scoredPublished Aug 10, 2026

CVE-2026-68325iommu/amd: Bound the early ACPI HID map

Updated under an hour ago (Oct 27, 2026, 9:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size. Check the capacity at the common found label before parsing the HID and UID or writing the entry.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before e5e0098f8cd82f8b3c8687a8f686309565d51745; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before afe7ea0520c49586703f210865ace2d70b017e48; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before 1e31d2394e0db69541b1591d46c5ad6431c81db3; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before abe5d7962f09adada9c4fb25b816dddd3f97c55d; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before e5ebe8544df1a1c3611739a8622156094fe470df; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before 030a8e84f8f1b6e96f469c84a13a225c3699910b; from ca3bf5d47cec8b7614bcb2e9132c40081d6d81db before fb80117fddb5b477218dc99bb53911b72c3847f8	CNA record

References

References

https://git.kernel.org/stable/c/9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb
https://git.kernel.org/stable/c/e5e0098f8cd82f8b3c8687a8f686309565d51745
https://git.kernel.org/stable/c/afe7ea0520c49586703f210865ace2d70b017e48
https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3
https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d
https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df
https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b
https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.