{"schemaVersion":3,"id":"USN-7861-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux-realtime, linux-realtime-6.8 vulnerabilities\n\nJean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered\nthat the Linux kernel contained insufficient branch predictor isolation\nbetween a guest and a userspace hypervisor for certain processors. This\nflaw is known as VMSCAPE. An attacker in a guest VM could possibly use this\nto expose sensitive information from the host OS.\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - HSI subsystem;\n  - Bluetooth subsystem;\n  - Timer subsystem;\n(CVE-2025-37838, CVE-2025-38118, CVE-2025-38352)","dates":{"published":"2025-11-07T09:08:23.000Z","modified":"2026-07-31T14:35:17.495Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux-realtime","name":"linux-realtime","label":"linux-realtime","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-realtime","purlType":"deb","versions":[{"text":"< 6.8.1-1037.38","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.1-1037.38","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-realtime-6.8","name":"linux-realtime-6.8","label":"linux-realtime-6.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-realtime-6.8","purlType":"deb","versions":[{"text":"< 6.8.1-1037.38~22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.1-1037.38~22.04.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7861-2","label":"ubuntu.com/security/notices/USN-7861-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-37838","label":"ubuntu.com/security/CVE-2025-37838","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38118","label":"ubuntu.com/security/CVE-2025-38118","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38352","label":"ubuntu.com/security/CVE-2025-38352","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-40300","label":"ubuntu.com/security/CVE-2025-40300","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-37838","CVE-2025-38118","CVE-2025-38352","CVE-2025-40300"],"downstream":[],"duplicates":[],"related":["CVE-2025-37838","CVE-2025-38118","CVE-2025-38352","CVE-2025-40300"]},"timeline":[{"kind":"published","date":"2025-11-07T09:08:23.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-31T14:35:17.495Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:08:55.948Z","stale":false,"partial":false}}