cve 2025 37849

CVE-2025-37849 is a Linux host-side KVM vulnerability on Arm64, not a flaw in Windows itself, and its practical exposure is narrower than the NVD’s generic Linux-kernel CPE display suggests. The upstream fix prevents KVM from leaving virtual GIC state alive after a failed virtual CPU creation...