In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang.
Invalid read at addr 0x102877002, size 2, region '(null)', reason: rejected Invalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected ...
It was traced down to virtio-console. Kexec works fine if virtio-console is not in use.
The issue is that virtio-console continues to write to the MMIO even after underlying virtio-pci device is reset.
Additionally, Eric noticed that IOMMUs are reset before devices, if devices are not reset on shutdown they continue to poke at guest memory and get errors from the IOMMU. Some devices get wedged then.
The problem can be solved by breaking all virtio devices on virtio bus shutdown, then resetting them.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.187-130.192Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-livepatch-5.10.240-238.959Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.355-280.664 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade perfUpgrade bpftool6.12Upgrade kernel-tools-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-livepatch-6.12.37-61.105Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-toolsUpgrade perf6.12Upgrade kernel6.12-tools-develUpgrade kernel-libbpfUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-devel | Aug 5, 2025 | Jun 18, 2025 |
| Debian | — | No solution exists | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1013-aws-64k | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub