USN-7935-1: linux-azure Ubuntu

Vulnerability summary

USN-7935-1 is a vulnerability in linux-azure Ubuntu with no CVSS score yet.

Timeline

1. 15-12-2025
   PublishedVulnerability first disclosed.
2. 21-09-2026
   Last modifiedVulnerability information updated.

Description

linux-azure, linux-azure-6.8 vulnerabilities Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - HSI subsystem; - Media drivers; - Network drivers; - Bluetooth subsystem; - Timer subsystem; - Memory management; - Appletalk network protocol; - Netfilter; - TLS protocol; (CVE-2025-21729, CVE-2025-37838, CVE-2025-37958, CVE-2025-38118, CVE-2025-38227, CVE-2025-38352, CVE-2025-38616, CVE-2025-38666, CVE-2025-38678, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018)

No weakness data has been published for this record.