CVE-2026-98003

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Do not reallocate GA log buffers on resume

Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement") moved the GA log allocation from iommu init pci() to enable iommus vapic(), which is called on every resume.

iommu init ga log() assigns iommu->ga log and iommu->ga log tail unconditionally. Each resume therefore replaces the boot-time pointers and leaks both old allocations. The function also uses GFP KERNEL from a syscore resume callback, where interrupts are disabled and the non-boot CPUs are offline.

Return early if both buffers are already allocated. Clear the pointers in free ga log() so a partial allocation failure cannot leave ga log dangling.