CVE-2026-98004
Linux: iommu/riscv: Serialize command queue publishing
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in787405e9e7bdc53ea7e063fe7b855171b4bd0e91Also 6d4c12ab9ab8db87411c863a54e0e97f9197afdeCVE List
What fixes it
- 787405e9e7bdc53ea7e063fe7b855171b4bd0e91LinuxCVE List
- 6d4c12ab9ab8db87411c863a54e0e97f9197afdeLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
iommu/riscv: Serialize command queue publishing
Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the queue lock when the command queue is full so other CPUs are not blocked behind a long poll.
Text from CVE List
Affected versions 8
- Linuxaffected: 856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c before 787405e9e7bdc53ea7e063fe7b855171b4bd0e91CVE List
- Linuxaffected: 856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c before 6d4c12ab9ab8db87411c863a54e0e97f9197afdeCVE List
- Linuxaffected: 856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c before ca58afa40946acd252a50fa4d4a86f15847a3d7dCVE List
- Linuxaffected: 6.13CVE List
- Linuxunaffected: all versions before 6.13CVE List
- Linuxunaffected: 6.18.57 through 6.18.*CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List