CVE-2026-98004
iommu/riscv: Serialize command queue publishing
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.18.57, 7.2.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the queue lock when the command queue is full so other CPUs are not blocked behind a long poll.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c · fixed in 787405e9e7bdc53ea7e063fe7b855171b4bd0e91; From 856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c · fixed in 6d4c12ab9ab8db87411c863a54e0e97f9197afde; From 856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c · fixed in ca58afa40946acd252a50fa4d4a86f15847a3d7d
- Linux Linux
6.13
- KernelLinux
From 6.13.0 · fixed in 6.18.57; From 6.19.0 · fixed in 7.2.7