CVE-2026-74311
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio_device_restore() resets the device and restores the negotiated features before calling ->restore(). viortc_freeze() intentionally leaves the existing virtqueues in place so the alarm queue can still wake the system, but viortc_restore() immediately calls viortc_init_vqs() without first deleting those old queues. If virtqueue reinitialization fails on virtio-pci, the transport error path can run vp_del_vqs() against a newly allocated vp_dev->vqs array while vdev->vqs still contains the old virtqueues. vp_del_vqs() then looks up queue state through the new array and can dereference a NULL info pointer in vp_del_vq(), crashing the guest kernel during restore. This can also happen during a non-faulty reinitialization, when one of the vp_find_vqs_msix() attempts is unsuccessful before a later attempt would succeed. Delete the stale virtqueues before rebuilding them. If restore fails before virtio_device_ready(), reuse the remove path to stop the device. Once the device is ready, return errors directly instead of deleting the virtqueues again.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74311
EUVD
EUVD-2026-59458

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the virtio RTC (Real-Time Clock) driver. During system restore, the driver fails to properly tear down old virtqueues before reinitializing them. This can lead to a NULL pointer dereference in the virtio-pci transport error path, causing the guest kernel to crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's virtio RTC (Real-Time Clock) subsystem and requires kernel-level inspection. Detection involves checking kernel logs for crashes during system restore or virtio device reinitialization failures. Commands like dmesg | grep -i virtio or journalctl -k | grep -i virtio may reveal errors. Ensure your kernel version is updated to a patched release.

Impact Analysis

If exploited, this vulnerability could crash the guest kernel during system restore operations. This may result in denial of service, data loss, or system instability for virtual machines relying on the affected virtio RTC driver.

Mitigation Strategies

Apply the latest kernel updates from your Linux distribution to patch this issue. If immediate patching is not possible, avoid triggering virtio device restores or reinitializations, particularly on systems using virtio-pci. Monitor kernel logs for crashes during suspend/resume cycles or device restarts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74311. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart