CVE-2025-39823

Summary

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: use array_index_nospec with indices that come from guest

min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < 72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48affected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < 31a0ad2f60cb4816e06218b63e695eb72ce74974affected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < d51e381beed5e2f50f85f49f6c90e023754efa12affected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < 33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985faffected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < f49161646e03d107ce81a99c6ca5da682fe5fb69affected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < 67a05679621b7f721bdba37a5d18665d3aceb695affected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < f57a4bd8d6cb5af05b8ac1be9098e249034639fbaffected
LinuxLinux4180bf1b655a791a0a6ef93a2ffffc762722c782 < c87bd4dd43a624109c3cc42d843138378a7f4548affected
LinuxLinux4.19affected
LinuxLinux0 < 4.19unaffected
LinuxLinux5.4.298 <= 5.4.*unaffected
LinuxLinux5.10.242 <= 5.10.*unaffected
LinuxLinux5.15.191 <= 5.15.*unaffected
LinuxLinux6.1.150 <= 6.1.*unaffected
LinuxLinux6.6.104 <= 6.6.*unaffected
LinuxLinux6.12.45 <= 6.12.*unaffected
LinuxLinux6.16.5 <= 6.16.*unaffected
LinuxLinux6.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

Additional References

References