CVE-2026-97987

CVE-2026-97987

published September 25, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

virtio_input: reset device if input_register_device() fails

Probe marks the device DRIVER_OK with virtio_device_ready() before

calling input_register_device(). If registration fails, the error path

cleared vi->ready and called del_vqs() while the device was still live,

so the device could keep DMA to queues that were already torn down.

Match remove/freeze: call virtio_reset_device() on that path before

tearing down the virtqueues.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-09-25T15:17Z
References (6)
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:23Z
    virtio_input: reset device if input_register_device() fails
    cvelistv5