In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: use array_index_nospec with indices that come from guest
min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.242-239.961Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel6.12-toolsUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernelUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.1.150-174.273Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfo | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 16, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-64kb-optional | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-raspi-5.15 | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub