CVE-2026-98004: iommu/riscv: Serialize command queue publishing
In the Linux kernel, the following vulnerability has been resolved:
iommu/riscv: Serialize command queue publishing
Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the queue lock when the command queue is full so other CPUs are not blocked behind a long poll.
Affected Software
Event History
Frequently Asked Questions
Which fixes are referenced for this issue?
The provided references identify fixes in the stable kernel history with commit IDs 6d4c12ab9ab8db87411c863a54e0e97f9197afde and ca58afa40946acd252a50fa4d4a86f15847a3d7d. No affected or fixed kernel version ranges are provided.
How does the fix avoid blocking other CPUs when the command queue is full?
It waits for hardware consumption outside the command-queue lock. This prevents other CPUs from being held behind a potentially long polling operation while the queue is full.