CVE-2025-71104

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) component, specifically in its handling of the x86 periodic Hypervisor (HV) timer. A local user, by pausing or suspending a virtual machine (VM) for an extended duration, can trigger a scenario where the HV timer's target expiration falls into the past. This leads to KVM repeatedly attempting to program an expired timer, which can cause an overflow during time delta conversion and a switch to the software timer. Consequently, this results in a series of rapid timer expiration callbacks that can lead to a hard lockup, effectively causing a Denial of Service (DoS) on the host system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.