CVE-2026-98004 - Vulnerability Details - OpenCVE

ReportizFlow

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the queue lock when the command queue is full so other CPUs are not blocked behind a long poll.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/6d4c12ab9ab8db87411c863a54e0e97f9197afde
https://git.kernel.org/stable/c/787405e9e7bdc53ea7e063fe7b855171b4bd0e91
https://git.kernel.org/stable/c/ca58afa40946acd252a50fa4d4a86f15847a3d7d

History

Thu, 15 Oct 2026 13:30:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/787405e9e7bdc53ea7e063fe7b855171b4bd0e91

Fri, 25 Sep 2026 17:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-395

Fri, 25 Sep 2026 10:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the queue lock when the command queue is full so other CPUs are not blocked behind a long poll.
Title		iommu/riscv: Serialize command queue publishing
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/6d4c12ab9ab8db87411c863a54e0e97f9197afde https://git.kernel.org/stable/c/ca58afa40946acd252a50fa4d4a86f15847a3d7d

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-25T10:23:31.134Z

Updated: 2026-10-19T09:12:09.901Z

Reserved: 2026-09-25T10:19:56.068Z

Link: CVE-2026-98004

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-25T11:17:28.637

Modified: 2026-10-19T10:17:51.767

Link: CVE-2026-98004

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98004", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:19:56.068Z", "datePublished": "2026-09-25T10:23:31.134Z", "dateUpdated": "2026-10-19T09:12:09.901Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:12:09.901Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/riscv: Serialize command queue publishing\n\nSerialize command queue publishing so software producer state advances only\nafter a command is written and the hardware tail is updated. Wait for\nhardware consumption outside the queue lock when the command queue is full\nso other CPUs are not blocked behind a long poll."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/riscv/iommu.c"], "versions": [{"version": "856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c", "lessThan": "787405e9e7bdc53ea7e063fe7b855171b4bd0e91", "status": "affected", "versionType": "git"}, {"version": "856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c", "lessThan": "6d4c12ab9ab8db87411c863a54e0e97f9197afde", "status": "affected", "versionType": "git"}, {"version": "856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c", "lessThan": "ca58afa40946acd252a50fa4d4a86f15847a3d7d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/riscv/iommu.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/787405e9e7bdc53ea7e063fe7b855171b4bd0e91"}, {"url": "https://git.kernel.org/stable/c/6d4c12ab9ab8db87411c863a54e0e97f9197afde"}, {"url": "https://git.kernel.org/stable/c/ca58afa40946acd252a50fa4d4a86f15847a3d7d"}], "title": "iommu/riscv: Serialize command queue publishing", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iommu/riscv/iommu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "787405e9e7bdc53ea7e063fe7b855171b4bd0e91", "status": "affected", "version": "856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c", "versionType": "git"}, {"lessThan": "6d4c12ab9ab8db87411c863a54e0e97f9197afde", "status": "affected", "version": "856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c", "versionType": "git"}, {"lessThan": "ca58afa40946acd252a50fa4d4a86f15847a3d7d", "status": "affected", "version": "856c0cfe5c5f6a2cc8d995872eb67bff9c68c57c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iommu/riscv/iommu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"lessThan": "6.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/riscv: Serialize command queue publishing\n\nSerialize command queue publishing so software producer state advances only\nafter a command is written and the hardware tail is updated. Wait for\nhardware consumption outside the queue lock when the command queue is full\nso other CPUs are not blocked behind a long poll."}], "id": "CVE-2026-98004", "lastModified": "2026-10-19T10:17:51.767", "metrics": {}, "published": "2026-09-25T11:17:28.637", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6d4c12ab9ab8db87411c863a54e0e97f9197afde"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/787405e9e7bdc53ea7e063fe7b855171b4bd0e91"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ca58afa40946acd252a50fa4d4a86f15847a3d7d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}