PT-2026-98659

In the Linux kernel, the following vulnerability has been resolved: virtio console: do not free control-out buffers on remove send control msg publishes &portdev-cpkt as the control-out virtqueue cookie. remove vqs walks every virtqueue and passes leftover cookies to free buf, which treats them a...

PT-2026-98027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the virtio-fs component. The virtio fs setup vqs function allocates fs-vqs and fs-mq map before calling virtio find vqs. If virtio find vqs fails, the error...

PT-2026-104970

In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtio fs setup vqs allocates fs-vqs and fs-mq map before calling virtio find vqs. If virtio find vqs fails, the error path frees both pointers and returns an error to virtio fs...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: caifvirtio: The incorrect pointer check in cfvprobe was fixed. delvqs frees virtqueues. Therefore, the pointer cfv-vqtx should be checked for being NULL before calling delvqs. Instead of checking cfv-vdev, this check is necessary...

EUVD-2026-48801

In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989128 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk-vqs should be freed before we...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986508 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk-vqs should be freed before we...

SUSE CVE-2025-21904

In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in cfvprobe delvqs frees virtqueues, therefore cfv-vqtx pointer should be checked for NULL before calling it, not cfv-vdev. Also the current implementation is redundant because the pointer...

CVE-2025-21904

In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in cfvprobe delvqs frees virtqueues, therefore cfv-vqtx pointer should be checked for NULL before calling it, not cfv-vdev. Also the current implementation is redundant because the pointer...

kernel: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails

No description is available for this CVE...

UBUNTU-CVE-2024-42134

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Check if isavq is NULL bug In the virtiopcicommon.c function vpdelvqs, vpdev-isavq is involved to determine whether it is admin virtqueue, but this function vpdev-isavq may be empty. For installations, virtiopcilegacy...

PT-2024-27497

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A vulnerability in the Linux kernel has been resolved. The issue occurs when request irq fails, causing an error path that calls vp del vqs, which attempts to free an already freed IRQ, resulti...

DEBIAN-CVE-2021-47319

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk-vqs should be freed before we call initvqs in virtblkrestore...

PT-2024-29763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the virtio-pci module. The issue involves the vp dev-is avq function being empty in certain installations, specifically...

GSD-2022-1001173 vsock/virtio: initialize vdev->priv before using VQs

vsock/virtio: initialize vdev-priv before using VQs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...