In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: use array_index_nospec with indices that come from guest
min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel-headersUpgrade kernel6.12-libbpfUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-staticUpgrade kernelUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade perfUpgrade kernel6.12-develUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade perf6.12-debuginfo | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 16, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-preempt-develUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-xilinxUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-6.8Upgrade linux-image-intelUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04 | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub