CVE - CVE-2025-37885

CVE-ID
CVE-2025-37885	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if new route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the new GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/023816bd5fa46fab94d1e7917fe131b79ed1fb41 URL:https://git.kernel.org/stable/c/023816bd5fa46fab94d1e7917fe131b79ed1fb41 MISC:https://git.kernel.org/stable/c/116c7d35b8f72eac383b9fd371d7c1a8ffc2968b URL:https://git.kernel.org/stable/c/116c7d35b8f72eac383b9fd371d7c1a8ffc2968b MISC:https://git.kernel.org/stable/c/3066ec21d1a33896125747f68638725f456308db URL:https://git.kernel.org/stable/c/3066ec21d1a33896125747f68638725f456308db MISC:https://git.kernel.org/stable/c/3481fd96d801715942b6f69fe251133128156f30 URL:https://git.kernel.org/stable/c/3481fd96d801715942b6f69fe251133128156f30 MISC:https://git.kernel.org/stable/c/9bcac97dc42d2f4da8229d18feb0fe2b1ce523a2 URL:https://git.kernel.org/stable/c/9bcac97dc42d2f4da8229d18feb0fe2b1ce523a2 MISC:https://git.kernel.org/stable/c/b5de7ac74f69603ad803c524b840bffd36368fc3 URL:https://git.kernel.org/stable/c/b5de7ac74f69603ad803c524b840bffd36368fc3 MISC:https://git.kernel.org/stable/c/e5f2dee9f7fcd2ff4b97869f3c66a0d89c167769 URL:https://git.kernel.org/stable/c/e5f2dee9f7fcd2ff4b97869f3c66a0d89c167769
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)