CVE-2026-98004: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only after a command is written and the hardware tail is updated. Wait for hardware consumption outside the queue lock when the command queue is full so other CPUs are not blocked behind a long poll.

Affected products

• Linux Linux: from 6.13, before 7.2.7 (fixed in 7.2.7)

Published 2026-09-25. Last modified 2026-09-25.