All vulnerabilities
CVE-2026-97987

Linux: virtio_input: reset device if input_register_device() fails

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in087b9ee4d36968329c846e6846e4e50f66532888Also 16c90260ae7ae32d7ac9128fb5da404c37154765, 9a7e107734137f098f9b81e5615aa5a02c5395c7 and 3 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 087b9ee4d36968329c846e6846e4e50f66532888LinuxCVE List
  • 16c90260ae7ae32d7ac9128fb5da404c37154765LinuxCVE List
  • 9a7e107734137f098f9b81e5615aa5a02c5395c7LinuxCVE List
  • 8407da8974326c1ffdfe6a5a9bfc8fed3212bbdfLinuxCVE List
  • 668ebfea7ba623450b12fdeaa0d080464d0c0a14LinuxCVE List
  • 81489b32a21c9360f8750d1fb600155d27452e19LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio_input: reset device if input_register_device() fails

Probe marks the device DRIVER_OK with virtio_device_ready() before calling input_register_device(). If registration fails, the error path cleared vi->ready and called del_vqs() while the device was still live, so the device could keep DMA to queues that were already torn down.

Match remove/freeze: call virtio_reset_device() on that path before tearing down the virtqueues.

Text from CVE List

Affected versions 14

  • Linuxaffected: 271c865161c57cfabca45b93eaa712b19da365bc before 087b9ee4d36968329c846e6846e4e50f66532888CVE List
  • Linuxaffected: 271c865161c57cfabca45b93eaa712b19da365bc before 16c90260ae7ae32d7ac9128fb5da404c37154765CVE List
  • Linuxaffected: 271c865161c57cfabca45b93eaa712b19da365bc before 9a7e107734137f098f9b81e5615aa5a02c5395c7CVE List
  • Linuxaffected: 271c865161c57cfabca45b93eaa712b19da365bc before 8407da8974326c1ffdfe6a5a9bfc8fed3212bbdfCVE List
  • Linuxaffected: 271c865161c57cfabca45b93eaa712b19da365bc before 668ebfea7ba623450b12fdeaa0d080464d0c0a14CVE List
  • Linuxaffected: 271c865161c57cfabca45b93eaa712b19da365bc before 81489b32a21c9360f8750d1fb600155d27452e19CVE List
  • Linuxaffected: 4.1CVE List
  • Linuxunaffected: all versions before 4.1CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 6