{"id":"CVE-2026-98003","revision":"03e147807120401e94b8e0d3c22424b6","records":[{"revision":"03e147807120401e94b8e0d3c22424b6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98003","aliases":[],"title":"iommu/amd: Do not reallocate GA log buffers on resume","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Do not reallocate GA log buffers on resume\n\nCommit c5e1a1eb9279 (\"iommu/amd: Simplify and Consolidate Virtual APIC\n(AVIC) Enablement\") moved the GA log allocation from iommu_init_pci()\nto enable_iommus_vapic(), which is called on every resume.\n\niommu_init_ga_log() assigns iommu->ga_log and iommu->ga_log_tail\nunconditionally. Each resume therefore replaces the boot-time pointers\nand leaks both old allocations. The function also uses GFP_KERNEL from a\nsyscore resume callback, where interrupts are disabled and the non-boot\nCPUs are offline.\n\nReturn early if both buffers are already allocated. Clear the pointers\nin free_ga_log() so a partial allocation failure cannot leave ga_log\ndangling.","state":0,"publishedAt":"2026-09-25T10:23:30.522+00:00","modifiedAt":"2026-10-21T12:54:02.989+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/iommu/amd/init.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b\",\n                            \"lessThan\": \"8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b\",\n                            \"lessThan\": \"ff85cdc2889e1c885eed218ee5bc0b59e0235b3f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b\",\n                            \"lessThan\": \"94458b80d3b203c1c9e2c98aa7319b7713e006c0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b\",\n                            \"lessThan\": \"b6be275d19cee01f8f1f08a2ff18337103d05d40\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b\",\n                            \"lessThan\": \"00a7dd64888d6dd72110b40e2824a088cf7b7386\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/iommu/amd/init.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.0\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.114\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.7\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434","https://git.kernel.org/stable/c/ff85cdc2889e1c885eed218ee5bc0b59e0235b3f","https://git.kernel.org/stable/c/94458b80d3b203c1c9e2c98aa7319b7713e006c0","https://git.kernel.org/stable/c/b6be275d19cee01f8f1f08a2ff18337103d05d40","https://git.kernel.org/stable/c/00a7dd64888d6dd72110b40e2824a088cf7b7386"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98003","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98003","identifiers":["CVE-2026-98003"]},"retained":false,"historicalAffected":[]}],"coverage":[]}