Skip to content
OpenAdvisories
Unscored USN-7860-3 1 CVE

linux-fips, linux-aws-fips, inux-gcp-fips vulnerability

Published Nov 7, 2025 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to expose sensitive information from the host OS.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-aws-fips 5.15.0-1096.103+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-fips 5.15.0-161.171+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-gcp-fips 5.15.0-1096.105+fips1

Vulnerabilities 1

  • Unscored —
    CVE-2025-40300

    x86/vmscape: Add conditional IBPB mitigation

    In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-40300