CVE-2009-3722: Linux Kernel

High severity, CVSS 7.1. EPSS: 2.3% chance of exploitation in the next 30 days.

The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.

Affected products

• Linux Linux Kernel: up to and including 2.6.31; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; …

Published 2009-10-30. Last modified 2026-06-16.