Linux Kernel vfio mIG Loop Issue in Affected Devices

CVE-2026-64474

What is CVE-2026-64474?

A critical vulnerability in the Linux kernel affects vfio devices by introducing an infinite loop in the vfio_mig_get_next_state() function. When transitioning states, the function loops to skip unsupported optional states until a supported one is found. However, the presence of the ERROR sentinel (VFIO_DEVICE_STATE_ERROR) in the state_flags_table causes the loop to continue indefinitely, ultimately leading to a soft lockup while holding the driver state mutex. This issue compromises system stability and may lead to panic events if softlockup_panic is enabled. Proper handling of the ERROR state is required to prevent the loop and enable correct state reporting.

References