CVE-2026-98003iommu/amd: Do not reallocate GA log buffers on resume
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement") moved the GA log allocation from iommu_init_pci() to enable_iommus_vapic(), which is called on every resume. iommu_init_ga_log() assigns iommu->ga_log and iommu->ga_log_tail unconditionally. Each resume therefore replaces the boot-time pointers and leaks both old allocations. The function also uses GFP_KERNEL from a syscore resume callback, where interrupts are disabled and the non-boot CPUs are offline. Return early if both buffers are already allocated. Clear the pointers in free_ga_log() so a partial allocation failure cannot leave ga_log dangling.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 25, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b before 94458b80d3b203c1c9e2c98aa7319b7713e006c0; from c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b before b6be275d19cee01f8f1f08a2ff18337103d05d40; from c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b before 00a7dd64888d6dd72110b40e2824a088cf7b7386 | CNA record |
References
- https://git.kernel.org/stable/c/94458b80d3b203c1c9e2c98aa7319b7713e006c0
- https://git.kernel.org/stable/c/b6be275d19cee01f8f1f08a2ff18337103d05d40
- https://git.kernel.org/stable/c/00a7dd64888d6dd72110b40e2824a088cf7b7386
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.