Skip to content
OpenAdvisories
Unscored USN-7862-1 1 CVE

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerability

Published Nov 6, 2025 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to expose sensitive information from the host OS.

Fixed packages 17

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-161.171
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1096.103
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1096.105
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1092.98
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1079.87
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1090.93
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1091.97
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-161.171
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1091.92
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1093.99
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1096.103~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1096.105~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-161.171~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1090.93~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-intel-iotg-5.15 5.15.0-1091.97~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-161.171~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle-5.15 5.15.0-1093.99~20.04.1

Vulnerabilities 1

  • Unscored —
    CVE-2025-40300

    x86/vmscape: Add conditional IBPB mitigation

    In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-40300