CVE-2025-68259

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced

When re-injecting a soft interrupt from an INT3, INT0, or (select) INTn

instruction, discard the exception and retry the instruction if the code

stream is changed (e.g. by a different vCPU) between when the CPU

executes the instruction and when KVM decodes the instruction to get the

next RIP.

As effectively predicted by commit 6ef88d6e36c2 ("KVM: SVM: Re-inject

INT3/INTO instead of retrying the instruction"), failure to verify that

the correct INTn instruction was decoded can effectively clobber guest

state due to decoding the wrong instruction and thus specifying the

wrong next RIP.

The bug most often manifests as "Oops: int3" panics on static branch

checks in Linux guests. Enabling or disabling a static branch in Linux

uses the kernel's "text poke" code patching mechanism. To modify code

while other CPUs may be executing that code, Linux (tempo

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References