In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.240-238.959Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.15.187-130.192Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.15.189-131.206Upgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel6.12-develUpgrade kernelUpgrade kernel6.12-headersUpgrade kernel-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12Upgrade kernel-toolsUpgrade bpftool6.12-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel-livepatch-6.12.37-61.105Upgrade kernel6.12-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade bpftool6.12 | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-lgUpgrade kernel-default-manUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub