In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: use array_index_nospec with indices that come from guest
min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.242-239.961Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf-debuginfoUpgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel6.12-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernelUpgrade kernel6.12-libbpf-staticUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-livepatch-6.1.150-174.273Upgrade perf6.12Upgrade bpftool6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 16, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-source-azure | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-intelUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-ibm-classicUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-awsUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub