CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation

highCVSS 7.8CVE-2025-37849

CSIRTS triage

vendor: Linuxproduct: Linux kernelDenial of service
What
KVM on ARM64 fails to properly tear down virtual GIC when vCPU creation fails, causing resource leaks and crashes.
Who is affected
Linux systems running KVM on ARM64 processors.
Urgency
High priority; CVSS 7.8 indicates serious impact; failed vCPU creation can destabilize the host.
Action
Apply kernel patch to ensure vGIC teardown completes properly on ARM64 vCPU creation failures.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel

Get an email when a new Linux kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source
Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity
high — CVSS 7.8
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-37849

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2025-37849coverage & exploitation statusNVD · CVE.org

Recent advisories for KVM

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from Microsoft Security Response Center