CVE-2009-3722: The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does...

Security readout for executives and security teams

This flaw affects old Linux KVM virtualization hosts. A user inside a guest operating system could run a crafted application that triggers a host-side trap, causing denial of service. The bundle does not show data theft or code execution, but it can affect availability of virtualization infrastructure. Exposure is mainly legacy Linux systems using KVM on kernels before 2.6.31.1, or distribution kernels that had not received the referenced vendor fixes. Modern supported kernels are unlikely to be affected, but old virtualization hosts and appliances need confirmation. Treat this as an availability risk for legacy virtualization infrastructure. It is not presented as active exploitation or data compromise, but affected KVM hosts running untrusted guests should be patched or retired promptly. Mitigation focus: Upgrade affected KVM hosts to Linux kernel 2.6.31.1 or a vendor-fixed kernel.; Apply applicable Ubuntu, Red Hat, or Mandriva kernel security updates where relevant.; Prioritize hosts running untrusted or multi-tenant guest workloads..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.