CVE-2026-74311

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the virtio RTC implementation where viortc restore() calls viortc init vqs() without first deleting existing virtqueues. During virtqueue reinitialization on virtio-pci, if the process fails or if vp find vqs msix() is unsuccessful, the transport error path may execute vp del vqs() using a newly allocated vp dev->vqs array while vdev->vqs still holds old virtqueues. This leads to a NULL info pointer dereference in vp del vq(), resulting in a guest kernel crash during the restore process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.