{"schema":"threatline.record/2","record":{"id":"CVE-2026-98003","aliases":[],"summary":"iommu/amd: Do not reallocate GA log buffers on resume","details":"In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Do not reallocate GA log buffers on resume\n\nCommit c5e1a1eb9279 (\"iommu/amd: Simplify and Consolidate Virtual APIC\n(AVIC) Enablement\") moved the GA log allocation from iommu_init_pci()\nto enable_iommus_vapic(), which is called on every resume.\n\niommu_init_ga_log() assigns iommu->ga_log and iommu->ga_log_tail\nunconditionally. Each resume therefore replaces the boot-time pointers\nand leaks both old allocations. The function also uses GFP_KERNEL from a\nsyscore resume callback, where interrupts are disabled and the non-boot\nCPUs are offline.\n\nReturn early if both buffers are already allocated. Clear the pointers\nin free_ga_log() so a partial allocation failure cannot leave ga_log\ndangling.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98003","source_modified_at":"2026-10-21T12:54:02.989Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b","lessThan":"8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434","status":"affected","versionType":"git"},{"version":"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b","lessThan":"ff85cdc2889e1c885eed218ee5bc0b59e0235b3f","status":"affected","versionType":"git"},{"version":"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b","lessThan":"94458b80d3b203c1c9e2c98aa7319b7713e006c0","status":"affected","versionType":"git"},{"version":"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b","lessThan":"b6be275d19cee01f8f1f08a2ff18337103d05d40","status":"affected","versionType":"git"},{"version":"c5e1a1eb9279fdb28d47ca2a4493a4c53b7d6a0b","lessThan":"00a7dd64888d6dd72110b40e2824a088cf7b7386","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98003","source_modified_at":"2026-10-21T12:54:02.989Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.0","status":"affected"},{"version":"0","lessThan":"6.0","status":"unaffected","versionType":"semver"},{"version":"6.6.160","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.114","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98003","source_modified_at":"2026-10-21T12:54:02.989Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98003","source_modified_at":"2026-10-21T12:54:02.989Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"94458b80d3b203c1c9e2c98aa7319b7713e006c0","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98003","source_modified_at":"2026-10-21T12:54:02.989Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"00a7dd64888d6dd72110b40e2824a088cf7b7386","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00168,"percentile":0.05733,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:23:30.522Z","modified_at":"2026-10-21T12:54:02.989Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98003","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-21T12:54:02.989Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98003","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/8b95269d7a43b737c2c0e2fa77bf00cc8a3a4434"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ff85cdc2889e1c885eed218ee5bc0b59e0235b3f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/94458b80d3b203c1c9e2c98aa7319b7713e006c0"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b6be275d19cee01f8f1f08a2ff18337103d05d40"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/00a7dd64888d6dd72110b40e2824a088cf7b7386"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-21T12:54:02.989Z","content_hash":"43b8f8e62de90b65a6cfb173bc4ca9d45086aceaec96f3413fcb9a2b6b6cf10d"}}