01 Record

CVE-2025-40026

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

HighPUBLISHEDCNA: Linux

CNA base score7.9 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

View raw JSON

02 Description

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.5% of scored records. A rank, not a probability.
NVD base score: 7.9 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
NVD analysis status: Deferred. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-28 09:32Z10 MO AGO

Last updated

2026-08-05 12:07Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.9)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

Weaknesses

CWE-754Improper Check for Unusual or Exceptional ConditionsClass

Data version

5.2

Document digest

e8bdbedeafce4e2befb9d0a46eaaafdda7b4f99e85539ad35a9b10169b32b443

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < a908eca437789589dd4624da428614c1275064dc, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < 00338255bb1f422642fb2798ebe92e93b6e4209b, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < e0ce3ed1048a47986d15aef1a98ebda25560d257, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < ba35a5d775799ce5ad60230be97336f2fefd518e, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < 3d3abf3f7e8b1abb082070a343de82d7efc80523, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < e7177c7e32cb806f348387b7f4faafd4a5b32054, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < 3a062a5c55adc5507600b9ae6d911e247e2f1d6e, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < 7366830642505683bbe905a2ba5d18d6e4b512b8, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to < e750f85391286a4c8100275516973324b621a269, 3.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a908eca437789589dd4624da428614c1275064dc
git.kernel.orghttps://git.kernel.org/stable/c/00338255bb1f422642fb2798ebe92e93b6e4209b
git.kernel.orghttps://git.kernel.org/stable/c/e0ce3ed1048a47986d15aef1a98ebda25560d257
git.kernel.orghttps://git.kernel.org/stable/c/ba35a5d775799ce5ad60230be97336f2fefd518e
git.kernel.orghttps://git.kernel.org/stable/c/3d3abf3f7e8b1abb082070a343de82d7efc80523
git.kernel.orghttps://git.kernel.org/stable/c/e7177c7e32cb806f348387b7f4faafd4a5b32054
git.kernel.orghttps://git.kernel.org/stable/c/3a062a5c55adc5507600b9ae6d911e247e2f1d6e
git.kernel.orghttps://git.kernel.org/stable/c/7366830642505683bbe905a2ba5d18d6e4b512b8
git.kernel.orghttps://git.kernel.org/stable/c/e750f85391286a4c8100275516973324b621a269

01 Record index

CVE-2025-40026

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-40026

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References