VULNERABILITY INTELLIGENCE
CVE-2025-61554
CVSS score5.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2025-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a denial of service (host hypervisor crash) via a crafted PCI configuration space access.
Weakness classification
- CWE-369: Divide By Zero