In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: use array_index_nospec with indices that come from guest
min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.15.191-132.213Upgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel6.12-headersUpgrade kernel6.12-tools-develUpgrade bpftoolUpgrade kernel6.12-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-toolsUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernelUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel-livepatch-6.1.150-174.273Upgrade bpftool6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12Upgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpf-devel | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 16, 2025 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-preemptUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade gfs2-kmp-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcpUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-intelUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinxUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fips-5.15 | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub