Details Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: Cryptographic API; ACPI drivers; HSI subsystem; I3C subsystem; InfiniBand drivers; Media drivers; Network drivers; Pin controllers subsystem; AFS file system; F2FS file system; SMB network file system; Padata parallel execution mechanism; Timer...…