In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.187-130.192Upgrade kernel-tools-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.189-131.206Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.240-238.959Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.355-280.664 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.37-61.105Upgrade kernel-headersUpgrade bpftool6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade perfUpgrade kernel6.12-libbpfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-libbpf-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-libbpf-staticUpgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-manUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-default-develUpgrade dtb-amlogic | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-6.14Upgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-virtualUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-gcpUpgrade linux-image-realtime-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1014-raspi | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub