CVE-2026-64474

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vfio mig get next state() function where the loop used to skip unsupported optional states does not account for the VFIO DEVICE STATE ERROR sentinel. When a blocked transition occurs, such as from STOP COPY to PRE COPY or STOP COPY to PRE COPY P2P, the loop condition remains true and the state never changes. This causes the system to spin indefinitely while holding the driver state mutex, potentially leading to a soft lockup or a system panic if softlockup panic is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.