USN-7937-1: linux-azure-fips Ubuntu

CVSS: UnknownPublished
Published 16-12-2025Last modified 17-10-2026
Open JSON

Vulnerability summary

USN-7937-1 is a vulnerability in linux-azure-fips Ubuntu with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 33 · Downstream 0 · Related 33
CVE-2021-47385CVE-2022-49026CVE-2022-49390CVE-2023-52574CVE-2023-52650CVE-2024-41006

Timeline

  1. 16-12-2025
    PublishedVulnerability first disclosed.
  2. 17-10-2026
    Last modifiedVulnerability information updated.

Description

linux-azure-fips vulnerabilities Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - DMA engine subsystem; - GPU drivers; - HSI subsystem; - Hardware monitoring drivers; - InfiniBand drivers; - Mailbox framework; - Network drivers; - Ethernet team driver; - AFS file system; - Ceph distributed file system; - Ext4 file system; - Network file system (NFS) server daemon; - NILFS2 file system; - File systems infrastructure; - KVM subsystem; - L3 Master device support module; - Timer subsystem; - Tracing infrastructure; - Memory management; - Appletalk network protocol; - DCCP (Datagram Congestion Control Protocol); - IPv6 networking; - Netfilter; - NET/ROM layer; - Open vSwitch; - SCTP protocol; - USB sound devices; (CVE-2021-47385, CVE-2022-49026, CVE-2022-49390, CVE-2023-52574, CVE-2023-52650, CVE-2024-41006, CVE-2024-49935, CVE-2024-49963, CVE-2024-50006, CVE-2024-50067, CVE-2024-50095, CVE-2024-50179, CVE-2024-50299, CVE-2024-53090, CVE-2024-53112, CVE-2024-53124, CVE-2024-53150, CVE-2024-53217, CVE-2024-56767, CVE-2024-58083, CVE-2025-21715, CVE-2025-21722, CVE-2025-21761, CVE-2025-21791, CVE-2025-21811, CVE-2025-21855, CVE-2025-37838, CVE-2025-37958, CVE-2025-38352, CVE-2025-38666, CVE-2025-39964, CVE-2025-40018)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu1 product
  • linux-azure-fips< 4.15.0-2104.110

1 vendor · 1 product

References

34 links
Show all 34 references