Search/USN-7853-3: Linux kernel (Azure) vulnerabilities
● News

USN-7853-3: Linux kernel (Azure) vulnerabilities

Packages linux-azure - Linux kernel for Microsoft Azure Cloud systems linux-azure-4.15 - Linux kernel for Microsoft Azure Cloud systems Details Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: DMA engine subsystem; GPU drivers; HSI subsystem; Ethernet team driver; Ext4 file system; Timer subsystem; DCCP…

Read original article
Source
ubuntu.com
Published
Nov 7, 2025
Mentions
14
language: en