In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.187-130.192Upgrade python-perfUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-livepatch-5.10.240-238.959Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.355-280.664Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-staticUpgrade perfUpgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.1.147-172.266Upgrade bpftool6.12Upgrade kernel-livepatch-6.12.37-61.105Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf6.12 | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-armUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-apmUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-freescale | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-virtualUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04cUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1013-aws | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub