CVE-2026-97987
Received Received - Intake

virtio_input Device Reset Failure in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the device DRIVER_OK with virtio_device_ready() before calling input_register_device(). If registration fails, the error path cleared vi->ready and called del_vqs() while the device was still live, so the device could keep DMA to queues that were already torn down. Match remove/freeze: call virtio_reset_device() on that path before tearing down the virtqueues.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97987
EUVD
EUVD-2026-86641

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling when a virtual input device fails to register. The kernel marks the device as ready before registration, and if registration fails, it incorrectly clears the ready state and tears down queues while the device remains active. This can lead to direct memory access (DMA) operations continuing to a device that is no longer properly set up.

Detection Guidance

This vulnerability is specific to the Linux kernel's virtio_input subsystem and may not have direct network detection methods. Check kernel logs for virtio device errors or failures during input device registration using commands like dmesg | grep virtio or journalctl -k | grep virtio.

Impact Analysis

This flaw could allow a virtual input device to continue performing DMA operations to memory regions that have been torn down, potentially causing system instability, crashes, or unauthorized memory access. It primarily affects systems using virtual input devices in the Linux kernel.

Mitigation Strategies

Update your Linux kernel to the latest patched version where this issue is resolved. If immediate patching is not possible, monitor virtio_input devices for errors and avoid using untrusted input devices until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97987. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart