Threats tagged 'ghsa-2qhp-87pg-jh75'

CVE-2026-68329 is a high-severity vulnerability in the Linux kernel's AMD IOMMU implementation. The flaw involves improper synchronization in the iommu_completion_wait() function, where the code may return early without waiting for all previously queued commands to complete. This can lead to use-after-free conditions due to stale translations being accessed while page-table pages are freed. The issue arises from a race condition in the interpretation of a synchronization flag shared across CPUs. The vulnerability has been resolved by ensuring proper locking and waiting for the last allocated sequence number, guaranteeing all prior commands complete before proceeding.