In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement") moved the GA log allocation from iommu_init_pci() to enable_iommus_vapic(), which is called on every resume. iommu_init_ga_log() assigns iommu->ga_log and iommu->ga_log_tail unconditionally. Each resume therefore replaces the boot-time pointers and leaks both old allocations. The function also uses GFP_KERNEL from a syscore resume callback, where interrupts are disabled and the non-boot CPUs are offline. Return early if both buffers are already allocated. Clear the pointers in free_ga_log() so a partial allocation failure cannot leave ga_log dangling.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log
    buffers on resume Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidate Virtual APIC (AVIC)
    Enablement") moved the GA log allocation from iommu_init_pci() to enable_iommus_vapic(), which is called
    on every resume. iommu_init_ga_log() assigns iommu->ga_log and iommu->ga_log_tail unconditionally. Each
    resume therefore replaces the boot-time pointers and leaks both old allocations. The function also uses
    GFP_KERNEL from a syscore resume callback, where interrupts are disabled and the non-boot CPUs are
    offline. Return early if both buffers are already allocated. Clear the pointers in free_ga_log() so a
    partial allocation failure cannot leave ga_log dangling. (CVE-2026-98003)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 (iommu/amd: Simplify and     Consolidate Virtual APIC (AVIC) Enablement) moved the GA log allocation from iommu_init_pci() to     enable_iommus_vapic(), which is called on every resume. iommu_init_ga_log() assigns iommu->ga_log and     iommu->ga_log_tail unconditionally. Each resume therefore replaces the boot-time pointers and leaks both     old allocations. The function also uses GFP_KERNEL from a syscore resume callback, where interrupts are     disabled and the non-boot CPUs are offline. Return early if both buffers are already allocated. Clear the     pointers in free_ga_log() so a partial allocation failure cannot leave ga_log dangling. (CVE-2026-98003)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
366742	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)	Nessus	SuSE Local Security Checks	Local	high
475637	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0	Tenable Cloud Security	Google COS Security Checks	Local	medium
475637	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
475429	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106	Tenable Cloud Security	Google COS Security Checks	Local	medium
475429	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
350665	Linux Distros Unpatched Vulnerability : CVE-2026-98003	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-98003

medium

Tenable Plugins

high

medium

medium

medium

medium

medium