THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-21839 (HIGH 7.3) — In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load

[NVD] CVE-2025-21839 (HIGH 7.3) — In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load

lownvdPublished 2025-03-07

CVE-2025-21839 CVSS: 7.3 HIGH Published: 2025-03-07T09:15:16.923

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load hardware with a stale vcpu->arch.dr6.

When the guest

Indicators of compromise

CVE-2025-21839cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21839