CVE-2009-3722

CVE-2009-3722 describes a denial-of-service vulnerability in the KVM subsystem of the Linux kernel before version 2.6.31.1. Specifically, the handle_dr function in arch/x86/kvm/vmx.c fails to properly verify the Current Privilege Level (CPL) before accessing a debug register. This flaw allows a malicious guest OS user to trigger a host OS trap, leading to a denial of service. With a CVSS score of 7.1, this vulnerability is considered high severity, requiring medium attack complexity but not authentication, and resulting in a complete denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.