NetSight
IP …
high7.8

CVE-2025-39823

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are gues…

Impact

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 5.4.298
from 5.5 before 5.10.242
from 5.11 before 5.15.191
from 5.16 before 6.1.150
from 6.2 before 6.6.104
from 6.7 before 6.12.45
DebianDebian Linux
Version 11.0

Weakness classification

CWE-129

References