In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.240-238.959Upgrade kernel-livepatch-5.15.187-130.192Upgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.15.189-131.206 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-headersUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade bpftoolUpgrade kernel6.12-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.147-172.266Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.37-61.105Upgrade bpftool6.12Upgrade perfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfo | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-manUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14 | Jun 26, 2025 | Jun 18, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub