Veeam warns of Software Appliance boot failures on AMD EPYC hosts
Veeam warns of boot failures for its Software Appliance VMs on AMD EPYC hosts due to FIPS kernel checks.
Veeam has alerted customers to boot failures affecting its Software Appliance virtual machines when running on hosts with AMD EPYC processors. The issue stems from FIPS-mode jitterentropy health checks within the Linux kernel, which intermittently fail on certain EPYC CPUs, causing a kernel panic during early boot. Veeam advises redeploying the appliance to a different host or disabling automatic updates as a mitigation.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Veeam?
Get an email when a new story names Veeam, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA compatibility issue between Veeam's Software Appliance and AMD EPYC processors causes kernel panics during boot due to failing FIPS-mode jitterentropy health checks in the Linux kernel — a problem introduced or exposed through automatic updates. This matters because backup and recovery appliances are critical infrastructure; unexpected boot failures can render an organization's entire backup capability unavailable precisely when it's needed most. The incident illustrates the danger of applying automatic updates without validating compatibility across all hardware configurations in the environment. It also highlights that security-hardening features like FIPS mode can introduce unexpected instability if not rigorously tested against diverse hardware. Veeam's recommended workaround — disabling automatic updates — itself introduces a secondary risk of unpatched vulnerabilities remaining in production.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — jitterentropy
- cve — CVE-2026-98432