{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45862", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.080Z", "datePublished": "2026-05-27T12:15:41.903Z", "dateUpdated": "2026-05-27T12:15:41.903Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-27T12:15:41.903Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush cache for PASID table before using it\n\nWhen writing the address of a freshly allocated zero-initialized PASID\ntable to a PASID directory entry, do that after the CPU cache flush for\nthis PASID table, not before it, to avoid the time window when this\nPASID table may be already used by non-coherent IOMMU hardware while\nits contents in RAM is still some random old data, not zero-initialized."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/intel/pasid.c"], "versions": [{"version": "7e00b52c8cdd9d3a985d63d72ecae7bde6314883", "lessThan": "cd75e77125c8a51754ca4cd60b4ca083ed735d1d", "status": "affected", "versionType": "git"}, {"version": "5c65f097124770c3e5b9b83ed1a8b68c119bc7b5", "lessThan": "0616137b70e6d9a547d4b60df8e1b64e36d83661", "status": "affected", "versionType": "git"}, {"version": "2bed9455db7cc0ab7ece6b3d846472097b52855a", "lessThan": "36990407cdd257473607e33802d00e978af2759e", "status": "affected", "versionType": "git"}, {"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "c93f23375d8c410954b0df825e814b632fd62b9d", "status": "affected", "versionType": "git"}, {"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "5962c30a6f05ea1ab73f039e235bb30716243517", "status": "affected", "versionType": "git"}, {"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "36244dfd3853f7bf89d03b8e90d56b23ce7fbc16", "status": "affected", "versionType": "git"}, {"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "d15cda135148ea7ba929cfdbcf208182bc29a7aa", "status": "affected", "versionType": "git"}, {"version": "194b3348bdbb7db65375c72f3f774aee4cc6614e", "lessThan": "22d169bdd2849fe6bd18c2643742e1c02be6451c", "status": "affected", "versionType": "git"}, {"version": "1b48c70feefc499b62670521efa002ab01e05df5", "status": "affected", "versionType": "git"}, {"version": "bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf", "status": "affected", "versionType": "git"}, {"version": "5.10.175", "lessThan": "5.10.252", "status": "affected", "versionType": "semver"}, {"version": "5.15.103", "lessThan": "5.15.202", "status": "affected", "versionType": "semver"}, {"version": "6.1.16", "lessThan": "6.1.165", "status": "affected", "versionType": "semver"}, {"version": "5.4.237", "lessThan": "5.5", "status": "affected", "versionType": "semver"}, {"version": "6.2.3", "lessThan": "6.3", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/intel/pasid.c"], "versions": [{"version": "6.3", "status": "affected"}, {"version": "0", "lessThan": "6.3", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.252", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.202", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.14", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.4", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.175", "versionEndExcluding": "5.10.252"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.103", "versionEndExcluding": "5.15.202"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.16", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.18.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.19.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "7.0"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.237"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d"}, {"url": "https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661"}, {"url": "https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e"}, {"url": "https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d"}, {"url": "https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517"}, {"url": "https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16"}, {"url": "https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa"}, {"url": "https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c"}], "title": "iommu/vt-d: Flush cache for PASID table before using it", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush cache for PASID table before using it\n\nWhen writing the address of a freshly allocated zero-initialized PASID\ntable to a PASID directory entry, do that after the CPU cache flush for\nthis PASID table, not before it, to avoid the time window when this\nPASID table may be already used by non-coherent IOMMU hardware while\nits contents in RAM is still some random old data, not zero-initialized."}], "id": "CVE-2026-45862", "lastModified": "2026-05-27T14:48:31.480", "metrics": {}, "published": "2026-05-27T14:16:58.430", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}

{"bugzilla": {"description": "kernel: iommu/vt-d: Flush cache for PASID table before using it", "id": "2482096", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482096"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-821", "details": ["A flaw was found in the Linux kernel's IOMMU (Input/Output Memory Management Unit) virtualized directed I/O (VT-d) component. When a freshly allocated PASID (Process Address Space ID) table is written to a directory entry, the CPU cache flush for this table occurs too late. This creates a time window where non-coherent IOMMU hardware might use the PASID table while its contents in memory are still uninitialized or contain old, random data. This could lead to data integrity issues or system instability."], "name": "CVE-2026-45862", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-45862\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45862\nhttps://lore.kernel.org/linux-cve-announce/2026052711-CVE-2026-45862-6bdd@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7e00b52c8cdd9d3a985d63d72ecae7bde6314883,cd75e77125c8a51754ca4cd60b4ca083ed735d1d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5c65f097124770c3e5b9b83ed1a8b68c119bc7b5,0616137b70e6d9a547d4b60df8e1b64e36d83661)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2bed9455db7cc0ab7ece6b3d846472097b52855a,36990407cdd257473607e33802d00e978af2759e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[194b3348bdbb7db65375c72f3f774aee4cc6614e,c93f23375d8c410954b0df825e814b632fd62b9d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[194b3348bdbb7db65375c72f3f774aee4cc6614e,5962c30a6f05ea1ab73f039e235bb30716243517)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[194b3348bdbb7db65375c72f3f774aee4cc6614e,36244dfd3853f7bf89d03b8e90d56b23ce7fbc16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[194b3348bdbb7db65375c72f3f774aee4cc6614e,d15cda135148ea7ba929cfdbcf208182bc29a7aa)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[194b3348bdbb7db65375c72f3f774aee4cc6614e,22d169bdd2849fe6bd18c2643742e1c02be6451c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "1b48c70feefc499b62670521efa002ab01e05df5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.10.175,5.10.252)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.15.103,5.15.202)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.16,6.1.165)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.4.237,5.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.2.3,6.3)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.3"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "5.10.252, <= 5.10.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "5.15.202, <= 5.15.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "6.1.165, <= 6.1.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "6.6.128, <= 6.6.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "6.12.75, <= 6.12.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "6.18.14, <= 6.18.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "6.19.4, <= 6.19.*"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "7.0, <= *"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-27T15:45:37.267290+00:00", "updated": "2026-05-28T17:00:13.047497+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}