In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.355-280.664Upgrade bpftoolUpgrade kernel-livepatch-5.10.240-238.959Upgrade kernel-livepatch-5.15.187-130.192Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12-tools-develUpgrade python3-perf6.12Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel6.12-develUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.37-61.105Upgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-staticUpgrade kernel-toolsUpgrade bpftool6.12-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade perf | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-apmUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-azure-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-oracle-64k-6.14 | Jun 26, 2025 | Jun 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub