USN-7874-2: linux-aws-fips Ubuntu

Vulnerability summary

USN-7874-2 is a vulnerability in linux-aws-fips Ubuntu with no CVSS score yet.

Timeline

1. 19-11-2025
   PublishedVulnerability first disclosed.
2. 17-10-2026
   Last modifiedVulnerability information updated.

Description

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HSI subsystem; - I3C subsystem; - SMB network file system; - Padata parallel execution mechanism; - Timer subsystem; - Networking core; (CVE-2023-52854, CVE-2024-35867, CVE-2024-50061, CVE-2024-56664, CVE-2025-21727, CVE-2025-37838, CVE-2025-38352)

No weakness data has been published for this record.