Back to Feed
VulnerabilitiesNov 6, 2026

Veeam warns of Software Appliance boot failures on AMD EPYC hosts

Veeam warns of boot failures for its Software Appliance VMs on AMD EPYC hosts due to FIPS kernel checks.

Veeam has alerted customers to boot failures affecting its Software Appliance virtual machines when running on hosts with AMD EPYC processors. The issue stems from FIPS-mode jitterentropy health checks within the Linux kernel, which intermittently fail on certain EPYC CPUs, causing a kernel panic during early boot. Veeam advises redeploying the appliance to a different host or disabling automatic updates as a mitigation.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Veeam?

Get an email when a new story names Veeam, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

A compatibility issue between Veeam's Software Appliance and AMD EPYC processors causes kernel panics during boot due to failing FIPS-mode jitterentropy health checks in the Linux kernel — a problem introduced or exposed through automatic updates. This matters because backup and recovery appliances are critical infrastructure; unexpected boot failures can render an organization's entire backup capability unavailable precisely when it's needed most. The incident illustrates the danger of applying automatic updates without validating compatibility across all hardware configurations in the environment. It also highlights that security-hardening features like FIPS mode can introduce unexpected instability if not rigorously tested against diverse hardware. Veeam's recommended workaround — disabling automatic updates — itself introduces a secondary risk of unpatched vulnerabilities remaining in production.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — jitterentropy
  • cve — CVE-2026-98432

Entities

Software Appliance (product)Veeam (vendor)AMD EPYC (technology)Linux kernel (technology)