---
id: CVE-2026-45862
title: 'iommu/vt-d: Flush cache for PASID table before using it'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommu/vt-d: Flush cache for PASID table before using it

  When writing the address of a freshly allocated zero-initialized PASID
  table to a PASID directory entry, do tha…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7e00b52c8cdd9d3a985d63d72ecae7bde6314883 <
    cd75e77125c8a51754ca4cd60b4ca083ed735d1d
  - >-
    Linux >= 5c65f097124770c3e5b9b83ed1a8b68c119bc7b5 <
    0616137b70e6d9a547d4b60df8e1b64e36d83661
  - >-
    Linux >= 2bed9455db7cc0ab7ece6b3d846472097b52855a <
    36990407cdd257473607e33802d00e978af2759e
  - >-
    Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e <
    c93f23375d8c410954b0df825e814b632fd62b9d
  - >-
    Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e <
    5962c30a6f05ea1ab73f039e235bb30716243517
  - >-
    Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e <
    36244dfd3853f7bf89d03b8e90d56b23ce7fbc16
  - >-
    Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e <
    d15cda135148ea7ba929cfdbcf208182bc29a7aa
  - >-
    Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e <
    22d169bdd2849fe6bd18c2643742e1c02be6451c
  - Linux 1b48c70feefc499b62670521efa002ab01e05df5
  - Linux bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf
  - Linux >= 5.10.175 < 5.10.252
  - Linux >= 5.15.103 < 5.15.202
  - Linux >= 6.1.16 < 6.1.165
  - Linux >= 5.4.237 < 5.5
  - Linux >= 6.2.3 < 6.3
  - Linux 6.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:18:13.638562Z'
published: '2026-05-27'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:20:46.048Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-45862'
references:
  - url: 'https://git.kernel.org/stable/c/cd75e77125c8a51754ca4cd60b4ca083ed735d1d'
  - url: 'https://git.kernel.org/stable/c/0616137b70e6d9a547d4b60df8e1b64e36d83661'
  - url: 'https://git.kernel.org/stable/c/36990407cdd257473607e33802d00e978af2759e'
  - url: 'https://git.kernel.org/stable/c/c93f23375d8c410954b0df825e814b632fd62b9d'
  - url: 'https://git.kernel.org/stable/c/5962c30a6f05ea1ab73f039e235bb30716243517'
  - url: 'https://git.kernel.org/stable/c/36244dfd3853f7bf89d03b8e90d56b23ce7fbc16'
  - url: 'https://git.kernel.org/stable/c/d15cda135148ea7ba929cfdbcf208182bc29a7aa'
  - url: 'https://git.kernel.org/stable/c/22d169bdd2849fe6bd18c2643742e1c02be6451c'
tags:
  - cve.org
epss: 0.00156
epssPercentile: 0.04267
ingestedAt: '2026-10-16T17:24:46.700Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Flush cache for PASID table before using it

When writing the address of a freshly allocated zero-initialized PASID
table to a PASID directory entry, do that after the CPU cache flush for
this PASID table, not before it, to avoid the time window when this
PASID table may be already used by non-coherent IOMMU hardware while
its contents in RAM is still some random old data, not zero-initialized.

## Affected

- `Linux >= 7e00b52c8cdd9d3a985d63d72ecae7bde6314883 < cd75e77125c8a51754ca4cd60b4ca083ed735d1d`
- `Linux >= 5c65f097124770c3e5b9b83ed1a8b68c119bc7b5 < 0616137b70e6d9a547d4b60df8e1b64e36d83661`
- `Linux >= 2bed9455db7cc0ab7ece6b3d846472097b52855a < 36990407cdd257473607e33802d00e978af2759e`
- `Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e < c93f23375d8c410954b0df825e814b632fd62b9d`
- `Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e < 5962c30a6f05ea1ab73f039e235bb30716243517`
- `Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e < 36244dfd3853f7bf89d03b8e90d56b23ce7fbc16`
- `Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e < d15cda135148ea7ba929cfdbcf208182bc29a7aa`
- `Linux >= 194b3348bdbb7db65375c72f3f774aee4cc6614e < 22d169bdd2849fe6bd18c2643742e1c02be6451c`
- `Linux 1b48c70feefc499b62670521efa002ab01e05df5`
- `Linux bc348a6cc8f92e9979fbfbb3c6b48fd51b4b1dbf`
- `Linux >= 5.10.175 < 5.10.252`
- `Linux >= 5.15.103 < 5.15.202`
- `Linux >= 6.1.16 < 6.1.165`
- `Linux >= 5.4.237 < 5.5`
- `Linux >= 6.2.3 < 6.3`
- `Linux 6.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.