virtio_input: reset device if input_register_device() fails

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-97987
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-25 11:17:26 UTC
Updated2026-10-19 10:17:50 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the device DRIVER_OK with virtio_device_ready() before calling input_register_device(). If registration fails, the error path cleared vi->ready and called del_vqs() while the device was still live, so the device could keep DMA to queues that were already torn down. Match remove/freeze: call virtio_reset_device() on that path before tearing down the virtqueues.

Risk And Classification

EPSS: 0.001720000 probability, percentile 0.059960000 (date 2026-10-05)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 271c865161c57cfabca45b93eaa712b19da365bc 087b9ee4d36968329c846e6846e4e50f66532888 git Not specified
CNA Linux Linux affected 271c865161c57cfabca45b93eaa712b19da365bc 16c90260ae7ae32d7ac9128fb5da404c37154765 git Not specified
CNA Linux Linux affected 271c865161c57cfabca45b93eaa712b19da365bc 9a7e107734137f098f9b81e5615aa5a02c5395c7 git Not specified
CNA Linux Linux affected 271c865161c57cfabca45b93eaa712b19da365bc 8407da8974326c1ffdfe6a5a9bfc8fed3212bbdf git Not specified
CNA Linux Linux affected 271c865161c57cfabca45b93eaa712b19da365bc 668ebfea7ba623450b12fdeaa0d080464d0c0a14 git Not specified
CNA Linux Linux affected 271c865161c57cfabca45b93eaa712b19da365bc 81489b32a21c9360f8750d1fb600155d27452e19 git Not specified
CNA Linux Linux affected 4.1 Not specified
CNA Linux Linux unaffected 4.1 semver Not specified
CNA Linux Linux unaffected 6.1.189 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.158 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.111 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.53 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.7 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/9a7e107734137f098f9b81e5615aa5a02c5395c7 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/16c90260ae7ae32d7ac9128fb5da404c37154765 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/668ebfea7ba623450b12fdeaa0d080464d0c0a14 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/087b9ee4d36968329c846e6846e4e50f66532888 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/8407da8974326c1ffdfe6a5a9bfc8fed3212bbdf 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/81489b32a21c9360f8750d1fb600155d27452e19 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report