PT-2026-69729 · Linux · Linux Kernel

CVE-2026-68329

·

Published

2026-08-10

·

Updated

2026-08-17

CVSS v3.1

8.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A logical race condition exists in the AMD IOMMU implementation within the iommu completion wait() function. The issue occurs because the need sync flag is read without a lock and can return early when false, even if previously queued commands have not yet completed in the hardware. In multi-CPU scenarios, this allows a CPU to proceed and potentially free page-table pages while the IOMMU is still using stale translations, creating a use-after-free window.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-68329

Affected Products

Linux Kernel