cyber.hendryadrian.com
Security News · bleepingcomputer.com

Veeam Warns of Software Appliance Boot Failures on Some AMD EPYC Hosts

· Original article ↗

Summary

Veeam says Software Appliance version 13.1 and later may kernel-panic during boot on certain AMD EPYC hosts when a FIPS-mode jitterentropy check fails. Mitigations include redeploying on another processor or managing updates manually.

Key points

  • Veeam reports intermittent boot failures on Software Appliance VMs running on certain AMD EPYC processors, including the 7262, 7302 and 7F72.
  • The failure occurs when an early-boot jitterentropy health check in FIPS mode fails, triggering a kernel panic.
  • The issue originates in the Linux kernel used by the appliance and affects Software Appliance version 13.1 and later.
  • Veeam recommends redeploying the appliance on a Linux host with a different processor where possible.
  • If redeployment is not possible, Veeam advises disabling automatic updates, installing updates manually and monitoring reboots.
  • If a kernel panic occurs, power the VM off and back on; restarting the guest OS will not recover it. Veeam says normal operation is unaffected after a successful boot.

Article Details

Event Type
Veeam advisory about Software Appliance virtual machines failing to boot on certain AMD EPYC hosts.
Impact
A FIPS-mode jitterentropy health check can fail during early boot on AMD EPYC 7262, 7302, and 7F72 processors, causing a kernel panic in Veeam Software Appliance version 13.1 and later. Veeam advises redeploying to a host with a different processor or, if that is not possible, disabling automatic updates and installing updates manually while monitoring reboots. After a successful boot, Veeam says no further errors are expected and Backup & Replication operation is not affected. Separately, Veeam reported that CVE-2026-98432 affects some products and said it has fixed the flaw for some components, with patched kernels being distributed privately or through Veeam Updater.

CVE

CVE-2026-98432Vendor / Product unavailableVeeam also said that some of its products are affected by a critical Linux kernel vulnerability (CVE-2026-98432) in the IPv4 TCP networking code that allows remote unauthenticated attackers to execute commands as

Vendors

AMDVeeam warns of Software Appliance boot failures on AMD EPYC hostsVeeamVeeam warns of Software Appliance boot failures on AMD EPYC hosts

Products

AMD EPYCVeeam warns of Software Appliance boot failures on AMD EPYC hostsLinux kernelTo comply with corporate and government security frameworks, the underlying Linux kernel runs integrated health and cryptographic checks (such as jitterentropy health tests) in FIPS mode during early boot.Veeam Backup & ReplicationSoftware Appliance VMs are pre-configured, Linux-based virtual machines that let admins run the Veeam Backup & Replication backup software suite on Linux devices without manually installing dependencies or configuringVeeam Software Appliance"A Veeam Software Appliance (Linux-based Veeam Backup & Replication) virtual machine running on a host with an AMD EPYC processor intermittently fails to boot after a reboot, including a reboot that follows an update

Related Articles