{"apiVersion":"1.0","identifier":"CVE-2026-74311","description":"In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio_device_restore() resets the device and restores the negotiated features before calling ->restore(). viortc_freeze() intentionally leaves the existing virtqueues in place so the alarm queue can still wake the system, but viortc_restore() immediately calls viortc_init_vqs() without first deleting those old queues. If virtqueue reinitialization fails on virtio-pci, the transport error path can run vp_del_vqs() against a newly allocated vp_dev->vqs array while vdev->vqs still contains the old virtqueues. vp_del_vqs() then looks up queue state through the new array and can dereference a NULL info pointer in vp_del_vq(), crashing the guest kernel during restore. This can also happen during a non-faulty reinitialization, when one of the vp_find_vqs_msix() attempts is unsuccessful before a later attempt would succeed. Delete the stale virtqueues before rebuilding them. If restore fails before virtio_device_ready(), reuse the remove path to stop the device. Once the device is ready, return errors directly instead of deleting the virtqueues again.","publishedAt":"2026-08-15T06:22:31","lastModifiedAt":"2026-08-17T06:19:25","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74311","cvssScore":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00127,"riskScore":0.79,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74311","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74311","en":"https://www.redsauce.net/en/cves/CVE-2026-74311","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74311","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74311","de":"https://www.redsauce.net/de/cves/CVE-2026-74311","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74311","el":"https://www.redsauce.net/el/cves/CVE-2026-74311"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74311"}}