InfoSec Signals™
Sign InStart Free
Back to CVE records
High 8.8Published May 9, 2025

CVE-2025-37885KVM: x86: Reset IRTE to host control if *new* route isn't postable

Updated under an hour ago ()

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.

CVSS
8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Modified
Record last updated
Oct 15, 2026
First seen by InfoSec Signals
Oct 15, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from efc644048ecde54f016011fe10110addd0de348f before e5f2dee9f7fcd2ff4b97869f3c66a0d89c167769; from efc644048ecde54f016011fe10110addd0de348f before 116c7d35b8f72eac383b9fd371d7c1a8ffc2968b; from efc644048ecde54f016011fe10110addd0de348f before 023816bd5fa46fab94d1e7917fe131b79ed1fb41; from efc644048ecde54f016011fe10110addd0de348f before 3481fd96d801715942b6f69fe251133128156f30; from efc644048ecde54f016011fe10110addd0de348f before b5de7ac74f69603ad803c524b840bffd36368fc3; from efc644048ecde54f016011fe10110addd0de348f before 3066ec21d1a33896125747f68638725f456308db; from efc644048ecde54f016011fe10110addd0de348f before 9bcac97dc42d2f4da8229d18feb0fe2b1ce523a2
CNA record
linux linux_kernel
linux:linux_kernel
from 4.4 before 5.10.237; from 5.11 before 5.15.181; from 5.16 before 6.1.136; from 6.2 before 6.6.89; from 6.7 before 6.12.26; from 6.13 before 6.14.5; 6.15; 6.15; and 1 more ranges
NVD
debian debian_linux
debian:debian_linux
11.0
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.