Vulnerability in Linux

CVE-2026-45862

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before it, to avoid the time window when this PASID table may be already used by non-coherent IOMMU hardware while its contents in RAM is still some random old data, not zero-initialized.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.002 (4.1th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 4th percentile — 4.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-45862: held from 0.002 to 0.002.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000

Affected products

  • Linux — versions 7e00b52c8cdd9d3a985d63d72ecae7bde6314883, 5c65f097124770c3e5b9b83ed1a8b68c119bc7b5, 2bed9455db7cc0ab7ece6b3d846472097b52855a
  • Linux Kernel

References

Frequently asked questions

What is CVE-2026-45862?
CVE-2026-45862 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-05-27.
How severe is CVE-2026-45862?
High severity. CVSS v3 base score is 7.8 out of 10.