CVE-2025-21740

Summary

CVE-2025-21740 is a kernel vulnerability in Linux that affects the KVM virtual machine (VM) technology. The issue allows a VM to become accessible without a NX huge page recovery thread, leading to a NULL pointer dereference and a kernel panic. This occurs during the waking of a VM's NX huge page recovery thread, and a VM without an active thread can be reached through related module parameters. The error results in a supervisor read access in kernel mode and a not-present page fault. Kernels with QEMU Standard PC (Q35 + ICH9, 2009) and BIOS 0.0.0 02/06/2015 are affected, and modules linked in the vulnerable system include kvm_intel and kvm.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.