Linux Kernel KVM Vulnerability Affecting Interrupt Routing

CVE-2025-37885

Summary

In the Linux kernel, a vulnerability exists within the Kernel-based Virtual Machine (KVM) component related to interrupt routing. When a new route is not postable, the interrupt routing table entry (IRTE) is not reset to host control, potentially leading to incorrect delivery of interrupts to guest virtual machines. This can cause issues such as dangling IRTEs, which may result in severe consequences like use-after-free errors if the virtual machine is terminated while the host IRQ remains allocated. Proper handling of the IRTE is crucial to ensure reliable and secure virtual machine operations.

References