CVE-2026-98003

iommu/amd: Do not reallocate GA log buffers on resume

State: Published
Severity: Not scored
Published: Sep 25, 2026
Updated: Oct 21, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Do not reallocate GA log buffers on resume

Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement") moved the GA log allocation from iommu_init_pci() to enable_iommus_vapic(), which is called on every resume.

iommu_init_ga_log() assigns iommu->ga_log and iommu->ga_log_tail unconditionally. Each resume therefore replaces the boot-time pointers and leaks both old allocations. The function also uses GFP_KERNEL from a syscore resume callback, where interrupts are disabled and the non-boot CPUs are offline.

Return early if both buffers are already allocated. Clear the pointers in free_ga_log() so a partial allocation failure cannot leave ga_log dangling.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before 8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434Affected c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before ff85cdc2889e1c885eed218ee5bc0b59e0235b3fAffected c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before 94458b80d3b203c1c9e2c98aa7319b7713e006c0Affected c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before b6be275d19cee01f8f1f08a2ff18337103d05d40Affected c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before 00a7dd64888d6dd72110b40e2824a088cf7b7386Affected
LinuxLinux	6.0Affected before 6.0Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2.7 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before 8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434Affected
c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before ff85cdc2889e1c885eed218ee5bc0b59e0235b3fAffected
c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before 94458b80d3b203c1c9e2c98aa7319b7713e006c0Affected
c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before b6be275d19cee01f8f1f08a2ff18337103d05d40Affected
c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b to before 00a7dd64888d6dd72110b40e2824a088cf7b7386Affected

LinuxLinux

6.0Affected
before 6.0Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2.7 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.