In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.187-130.192Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.240-238.959Upgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade bpftool6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.37-61.105Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftool6.12-debuginfoUpgrade perfUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel6.12Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-source-rtUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-genericUpgrade linux-image-aws-6.14Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64kUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-1013-oracle | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub