CVE-2026-68325None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Bound the early ACPI HID map
The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size.
Check the capacity at the common found label before parsing the HID and UID or writing the entry.
Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bbLinux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < e5e0098f8cd82f8b3c8687a8f686309565d51745Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < afe7ea0520c49586703f210865ace2d70b017e48Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 1e31d2394e0db69541b1591d46c5ad6431c81db3Linux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < abe5d7962f09adada9c4fb25b816dddd3f97c55dLinux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < e5ebe8544df1a1c3611739a8622156094fe470dfLinux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 030a8e84f8f1b6e96f469c84a13a225c3699910bLinux >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < fb80117fddb5b477218dc99bb53911b72c3847f8Linux 4.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses