CVE-2025-61554

MEDIUM

A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a denial of service (host hypervisor cr...

CVSS 3.15.5
EPSS0.2%
Percentile4th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-369: CWE-369
◆ AI Analysis — automated analysis, not human-reviewed

A divide-by-zero vulnerability in the VirtIO network device emulation of BitVisor from commit 108df6 to commit 480907 allows local attackers to cause a denial of service by crashing the host hypervisor through a crafted PCI configuration space access.

BSID: BS-2025-GLOBAL-025881-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-61554?
A divide-by-zero vulnerability in the VirtIO network device emulation of BitVisor from commit 108df6 to commit 480907 allows local attackers to cause a denial of service by crashing the host hypervisor through a crafted PCI configuration space access.
What is the CVSS score for CVE-2025-61554?
CVE-2025-61554 has CVSS 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.2%.
Is CVE-2025-61554 actively exploited?
No confirmed active exploitation of CVE-2025-61554 as of 2026-05-30.
How do I remediate CVE-2025-61554?
Priority: HIGH.
Vulnerability Details
CVE IDCVE-2025-61554
BSIDBS-2025-GLOBAL-025881-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published2025-10-16
Last Modified2026-04-15
ICS Relevance0%
Weakness (CWE)
CWE-369
SourceNVD
Official Description

A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a denial of service (host hypervisor crash) via a crafted PCI configuration space access.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered by a local attacker sending a specially crafted PCI configuration space access to the VirtIO network device emulation in BitVisor. This access leads to a divide-by-zero error, causing the host hypervisor to crash.

Exploitation Likelihood: MEDIUM

Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 364 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash17f5e49d65ef869728dadacff13fa1a71e640cd446b3be1870372707417b0bb26979e564c6aec4614ac58e67c0d44c47b134922dc3377048040a0a5b67fcc30f

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →