{"id":"CVE-2026-68325","title":"iommu/amd: Bound the early ACPI HID map","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Bound the early ACPI HID map\n\nThe ivrs_acpihid command-line parser appends entries to a fixed\nfour-element early_acpihid_map array. Unlike the sibling IOAPIC…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < e5e0098f8cd82f8b3c8687a8f686309565d51745","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < afe7ea0520c49586703f210865ace2d70b017e48","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 1e31d2394e0db69541b1591d46c5ad6431c81db3","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < abe5d7962f09adada9c4fb25b816dddd3f97c55d","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < e5ebe8544df1a1c3611739a8622156094fe470df","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 030a8e84f8f1b6e96f469c84a13a225c3699910b","Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < fb80117fddb5b477218dc99bb53911b72c3847f8","Linux 4.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:47:14.631530Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:13.193Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68325","references":[{"url":"https://git.kernel.org/stable/c/9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb"},{"url":"https://git.kernel.org/stable/c/e5e0098f8cd82f8b3c8687a8f686309565d51745"},{"url":"https://git.kernel.org/stable/c/afe7ea0520c49586703f210865ace2d70b017e48"},{"url":"https://git.kernel.org/stable/c/1e31d2394e0db69541b1591d46c5ad6431c81db3"},{"url":"https://git.kernel.org/stable/c/abe5d7962f09adada9c4fb25b816dddd3f97c55d"},{"url":"https://git.kernel.org/stable/c/e5ebe8544df1a1c3611739a8622156094fe470df"},{"url":"https://git.kernel.org/stable/c/030a8e84f8f1b6e96f469c84a13a225c3699910b"},{"url":"https://git.kernel.org/stable/c/fb80117fddb5b477218dc99bb53911b72c3847f8"}],"tags":["cve.org"],"epss":0.00184,"epssPercentile":0.08087,"ingestedAt":"2026-11-06T18:00:12.612Z","slug":"CVE-2026-68325","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Bound the early ACPI HID map\n\nThe ivrs_acpihid command-line parser appends entries to a fixed\nfour-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET\nparsers, it does not reject a fifth entry before incrementing the map size.\n\nCheck the capacity at the common found label before parsing the HID and\nUID or writing the entry.\n\n## Affected\n\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < e5e0098f8cd82f8b3c8687a8f686309565d51745`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < afe7ea0520c49586703f210865ace2d70b017e48`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 1e31d2394e0db69541b1591d46c5ad6431c81db3`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < abe5d7962f09adada9c4fb25b816dddd3f97c55d`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < e5ebe8544df1a1c3611739a8622156094fe470df`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 030a8e84f8f1b6e96f469c84a13a225c3699910b`\n- `Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < fb80117fddb5b477218dc99bb53911b72c3847f8`\n- `Linux 4.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}