CVE-2026-97987

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the virtio input driver where the device is marked as DRIVER OK via virtio device ready() before input register device() is called. If the registration process fails, the error handling path clears the vi->ready variable and executes del vqs() while the device remains active. This can lead to the device continuing Direct Memory Access (DMA)—a feature allowing hardware to access main system memory independently of the CPU—to queues that have already been torn down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.