{
  "threat_severity" : "Moderate",
  "public_date" : "2025-06-18T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: virtio: break and reset virtio devices on device_shutdown()",
    "id" : "2373319",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2373319"
  },
  "cvss3" : {
    "cvss3_base_score" : "6.7",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "status" : "draft"
  },
  "cwe" : "CWE-826",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\nvirtio: break and reset virtio devices on device_shutdown()\nHongyu reported a hang on kexec in a VM. QEMU reported invalid memory\naccesses during the hang.\nInvalid read at addr 0x102877002, size 2, region '(null)', reason: rejected\nInvalid write at addr 0x102877A44, size 2, region '(null)', reason: rejected\n...\nIt was traced down to virtio-console. Kexec works fine if virtio-console\nis not in use.\nThe issue is that virtio-console continues to write to the MMIO even after\nunderlying virtio-pci device is reset.\nAdditionally, Eric noticed that IOMMUs are reset before devices, if\ndevices are not reset on shutdown they continue to poke at guest memory\nand get errors from the IOMMU. Some devices get wedged then.\nThe problem can be solved by breaking all virtio devices on virtio\nbus shutdown, then resetting them." ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2025-38064\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-38064\nhttps://lore.kernel.org/linux-cve-announce/2025061836-CVE-2025-38064-8108@gregkh/T" ],
  "name" : "CVE-2025-38064",
  "csaw" : false
}