High · published May 27, 2026
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Flush cache for PASID table before using it
When writing the address of a freshly allocated zero-initialized PASID
table to a PASID directory entry, do that after the CPU cache flush for
this PASID table, not before it, to avoid the time window when this
PASID table may be already used by non-coherent IOMMU hardware while
its contents in RAM is still some random old data, not zero-initialized.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.4.237, < 5.5 | 5.5 |
| linux/linux_kernel | ≥ 5.10.175, < 5.10.252 | 5.10.252 |
| linux/linux_kernel | ≥ 5.15.103, < 5.15.202 | 5.15.202 |
| linux/linux_kernel | ≥ 6.1.16, < 6.1.165 | 6.1.165 |
| linux/linux_kernel | ≥ 6.2.3, < 6.6.128 | 6.6.128 |
| linux/linux_kernel | ≥ 6.7, < 6.12.75 | 6.12.75 |
| linux/linux_kernel | ≥ 6.13, < 6.18.14 | 6.18.14 |
| linux/linux_kernel | ≥ 6.19, < 6.19.4 | 6.19.4 |