CVE Tools

Veeam warns of Software Appliance boot failures on AMD EPYC hosts

BleepingComputerBy Sergiu Gatlan

Our summary

Veeam has alerted customers that its Linux-based Software Appliance virtual machines, which bundle Veeam Backup & Replication for easy deployment, can fail to start up on certain hosts powered by AMD EPYC chips. The problem stems from a FIPS-mode jitterentropy security check run by the underlying Linux kernel during early boot, which intermittently fails on processors such as the EPYC 7262, 7302 and 7F72, triggering a kernel panic instead of a normal startup. The issue affects Veeam Software Appliance 13.1 and newer, and can recur after reboots or kernel-updating patches; Veeam recommends moving the appliance to a host with a different CPU, or disabling auto-updates and manually powering the VM off and back on if a panic occurs. Separately, Veeam disclosed the same day that some of its products are exposed to a critical, unauthenticated remote code execution flaw, CVE-2026-98432, in the Linux kernel's MPTCP networking code, and is rolling out patched kernels to affected systems.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure