{"schemaVersion":3,"id":"USN-7940-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux-azure-fips vulnerabilities\n\nJean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered\nthat the Linux kernel contained insufficient branch predictor isolation\nbetween a guest and a userspace hypervisor for certain processors. This\nflaw is known as VMSCAPE. An attacker in a guest VM could possibly use this\nto expose sensitive information from the host OS. (CVE-2025-40300)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - PowerPC architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Ublk userspace block driver;\n  - Clock framework and drivers;\n  - EDAC drivers;\n  - GPU drivers;\n  - HSI subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Remote Processor subsystem;\n  - Thermal drivers;\n  - Virtio Host (VHOST) subsystem;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - JFS file system;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - SMB network file system;\n  - Memory management;\n  - Bluetooth subsystem;\n  - RDMA verbs API;\n  - Kernel fork() syscall;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Watch queue notification mechanism;\n  - Appletalk network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TLS protocol;\n  - SoC Audio for Freescale CPUs drivers;\n(CVE-2023-53034, CVE-2024-58092, CVE-2025-21729, CVE-2025-22018,\nCVE-2025-22019, CVE-2025-22020, CVE-2025-22021, CVE-2025-22025,\nCVE-2025-22027, CVE-2025-22028, CVE-2025-22033, CVE-2025-22035,\nCVE-2025-22036, CVE-2025-22038, CVE-2025-22039, CVE-2025-22040,\nCVE-2025-22041, CVE-2025-22042, CVE-2025-22044, CVE-2025-22045,\nCVE-2025-22047, CVE-2025-22050, CVE-2025-22053, CVE-2025-22054,\nCVE-2025-22055, CVE-2025-22056, CVE-2025-22057, CVE-2025-22058,\nCVE-2025-22060, CVE-2025-22062, CVE-2025-22063, CVE-2025-22064,\nCVE-2025-22065, CVE-2025-22066, CVE-2025-22068, CVE-2025-22070,\nCVE-2025-22071, CVE-2025-22072, CVE-2025-22073, CVE-2025-22075,\nCVE-2025-22079, CVE-2025-22080, CVE-2025-22081, CVE-2025-22083,\nCVE-2025-22086, CVE-2025-22089, CVE-2025-22090, CVE-2025-22095,\nCVE-2025-22097, CVE-2025-23136, CVE-2025-23138, CVE-2025-37838,\nCVE-2025-37937, CVE-2025-37958, CVE-2025-38118, CVE-2025-38152,\nCVE-2025-38227, CVE-2025-38240, CVE-2025-38352, CVE-2025-38575,\nCVE-2025-38616, CVE-2025-38637, CVE-2025-38666, CVE-2025-38678,\nCVE-2025-39682, CVE-2025-39728, CVE-2025-39735, CVE-2025-39964,\nCVE-2025-39993, CVE-2025-40018, CVE-2025-40114, CVE-2025-40157)","dates":{"published":"2025-12-17T20:58:49.000Z","modified":"2026-10-17T12:54:38.354Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux-azure-fips","name":"linux-azure-fips","label":"linux-azure-fips","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-fips","purlType":"deb","versions":[{"text":"< 6.8.0-1044.50+fips1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.0-1044.50+fips1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7940-1","label":"ubuntu.com/security/notices/USN-7940-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-53034","label":"ubuntu.com/security/CVE-2023-53034","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-58092","label":"ubuntu.com/security/CVE-2024-58092","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-21729","label":"ubuntu.com/security/CVE-2025-21729","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22018","label":"ubuntu.com/security/CVE-2025-22018","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22019","label":"ubuntu.com/security/CVE-2025-22019","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22020","label":"ubuntu.com/security/CVE-2025-22020","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22021","label":"ubuntu.com/security/CVE-2025-22021","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22025","label":"ubuntu.com/security/CVE-2025-22025","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22027","label":"ubuntu.com/security/CVE-2025-22027","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22028","label":"ubuntu.com/security/CVE-2025-22028","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22033","label":"ubuntu.com/security/CVE-2025-22033","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22035","label":"ubuntu.com/security/CVE-2025-22035","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22036","label":"ubuntu.com/security/CVE-2025-22036","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22038","label":"ubuntu.com/security/CVE-2025-22038","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22039","label":"ubuntu.com/security/CVE-2025-22039","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22040","label":"ubuntu.com/security/CVE-2025-22040","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22041","label":"ubuntu.com/security/CVE-2025-22041","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22042","label":"ubuntu.com/security/CVE-2025-22042","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22044","label":"ubuntu.com/security/CVE-2025-22044","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22045","label":"ubuntu.com/security/CVE-2025-22045","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22047","label":"ubuntu.com/security/CVE-2025-22047","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22050","label":"ubuntu.com/security/CVE-2025-22050","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22053","label":"ubuntu.com/security/CVE-2025-22053","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22054","label":"ubuntu.com/security/CVE-2025-22054","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22055","label":"ubuntu.com/security/CVE-2025-22055","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22056","label":"ubuntu.com/security/CVE-2025-22056","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22057","label":"ubuntu.com/security/CVE-2025-22057","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22058","label":"ubuntu.com/security/CVE-2025-22058","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22060","label":"ubuntu.com/security/CVE-2025-22060","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22062","label":"ubuntu.com/security/CVE-2025-22062","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22063","label":"ubuntu.com/security/CVE-2025-22063","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22064","label":"ubuntu.com/security/CVE-2025-22064","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22065","label":"ubuntu.com/security/CVE-2025-22065","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22066","label":"ubuntu.com/security/CVE-2025-22066","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22068","label":"ubuntu.com/security/CVE-2025-22068","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22070","label":"ubuntu.com/security/CVE-2025-22070","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22071","label":"ubuntu.com/security/CVE-2025-22071","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22072","label":"ubuntu.com/security/CVE-2025-22072","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22073","label":"ubuntu.com/security/CVE-2025-22073","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22075","label":"ubuntu.com/security/CVE-2025-22075","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22079","label":"ubuntu.com/security/CVE-2025-22079","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22080","label":"ubuntu.com/security/CVE-2025-22080","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22081","label":"ubuntu.com/security/CVE-2025-22081","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22083","label":"ubuntu.com/security/CVE-2025-22083","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22086","label":"ubuntu.com/security/CVE-2025-22086","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22089","label":"ubuntu.com/security/CVE-2025-22089","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22090","label":"ubuntu.com/security/CVE-2025-22090","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22095","label":"ubuntu.com/security/CVE-2025-22095","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22097","label":"ubuntu.com/security/CVE-2025-22097","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-23136","label":"ubuntu.com/security/CVE-2025-23136","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-23138","label":"ubuntu.com/security/CVE-2025-23138","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-37838","label":"ubuntu.com/security/CVE-2025-37838","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-37937","label":"ubuntu.com/security/CVE-2025-37937","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-37958","label":"ubuntu.com/security/CVE-2025-37958","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38118","label":"ubuntu.com/security/CVE-2025-38118","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38152","label":"ubuntu.com/security/CVE-2025-38152","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38227","label":"ubuntu.com/security/CVE-2025-38227","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38240","label":"ubuntu.com/security/CVE-2025-38240","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38352","label":"ubuntu.com/security/CVE-2025-38352","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38575","label":"ubuntu.com/security/CVE-2025-38575","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38616","label":"ubuntu.com/security/CVE-2025-38616","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38637","label":"ubuntu.com/security/CVE-2025-38637","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38666","label":"ubuntu.com/security/CVE-2025-38666","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-38678","label":"ubuntu.com/security/CVE-2025-38678","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-39682","label":"ubuntu.com/security/CVE-2025-39682","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-39728","label":"ubuntu.com/security/CVE-2025-39728","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-39735","label":"ubuntu.com/security/CVE-2025-39735","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-39964","label":"ubuntu.com/security/CVE-2025-39964","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-39993","label":"ubuntu.com/security/CVE-2025-39993","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-40018","label":"ubuntu.com/security/CVE-2025-40018","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-40114","label":"ubuntu.com/security/CVE-2025-40114","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-40157","label":"ubuntu.com/security/CVE-2025-40157","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-40300","label":"ubuntu.com/security/CVE-2025-40300","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2023-53034","CVE-2024-58092","CVE-2025-21729","CVE-2025-22018","CVE-2025-22019","CVE-2025-22020","CVE-2025-22021","CVE-2025-22025","CVE-2025-22027","CVE-2025-22028","CVE-2025-22033","CVE-2025-22035","CVE-2025-22036","CVE-2025-22038","CVE-2025-22039","CVE-2025-22040","CVE-2025-22041","CVE-2025-22042","CVE-2025-22044","CVE-2025-22045","CVE-2025-22047","CVE-2025-22050","CVE-2025-22053","CVE-2025-22054","CVE-2025-22055","CVE-2025-22056","CVE-2025-22057","CVE-2025-22058","CVE-2025-22060","CVE-2025-22062","CVE-2025-22063","CVE-2025-22064","CVE-2025-22065","CVE-2025-22066","CVE-2025-22068","CVE-2025-22070","CVE-2025-22071","CVE-2025-22072","CVE-2025-22073","CVE-2025-22075","CVE-2025-22079","CVE-2025-22080","CVE-2025-22081","CVE-2025-22083","CVE-2025-22086","CVE-2025-22089","CVE-2025-22090","CVE-2025-22095","CVE-2025-22097","CVE-2025-23136","CVE-2025-23138","CVE-2025-37838","CVE-2025-37937","CVE-2025-37958","CVE-2025-38118","CVE-2025-38152","CVE-2025-38227","CVE-2025-38240","CVE-2025-38352","CVE-2025-38575","CVE-2025-38616","CVE-2025-38637","CVE-2025-38666","CVE-2025-38678","CVE-2025-39682","CVE-2025-39728","CVE-2025-39735","CVE-2025-39964","CVE-2025-39993","CVE-2025-40018","CVE-2025-40114","CVE-2025-40157","CVE-2025-40300"],"downstream":[],"duplicates":[],"related":["CVE-2023-53034","CVE-2024-58092","CVE-2025-21729","CVE-2025-22018","CVE-2025-22019","CVE-2025-22020","CVE-2025-22021","CVE-2025-22025","CVE-2025-22027","CVE-2025-22028","CVE-2025-22033","CVE-2025-22035","CVE-2025-22036","CVE-2025-22038","CVE-2025-22039","CVE-2025-22040","CVE-2025-22041","CVE-2025-22042","CVE-2025-22044","CVE-2025-22045","CVE-2025-22047","CVE-2025-22050","CVE-2025-22053","CVE-2025-22054","CVE-2025-22055","CVE-2025-22056","CVE-2025-22057","CVE-2025-22058","CVE-2025-22060","CVE-2025-22062","CVE-2025-22063","CVE-2025-22064","CVE-2025-22065","CVE-2025-22066","CVE-2025-22068","CVE-2025-22070","CVE-2025-22071","CVE-2025-22072","CVE-2025-22073","CVE-2025-22075","CVE-2025-22079","CVE-2025-22080","CVE-2025-22081","CVE-2025-22083","CVE-2025-22086","CVE-2025-22089","CVE-2025-22090","CVE-2025-22095","CVE-2025-22097","CVE-2025-23136","CVE-2025-23138","CVE-2025-37838","CVE-2025-37937","CVE-2025-37958","CVE-2025-38118","CVE-2025-38152","CVE-2025-38227","CVE-2025-38240","CVE-2025-38352","CVE-2025-38575","CVE-2025-38616","CVE-2025-38637","CVE-2025-38666","CVE-2025-38678","CVE-2025-39682","CVE-2025-39728","CVE-2025-39735","CVE-2025-39964","CVE-2025-39993","CVE-2025-40018","CVE-2025-40114","CVE-2025-40157","CVE-2025-40300"]},"timeline":[{"kind":"published","date":"2025-12-17T20:58:49.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-17T12:54:38.354Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T17:54:57.727Z","stale":false,"partial":false}}