Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-39823

KVM: x86: use array_index_nospec with indices that come from guest

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < 72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48affected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < 31a0ad2f60cb4816e06218b63e695eb72ce74974affected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < d51e381beed5e2f50f85f49f6c90e023754efa12affected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < 33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985faffected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < f49161646e03d107ce81a99c6ca5da682fe5fb69affected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < 67a05679621b7f721bdba37a5d18665d3aceb695affected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < f57a4bd8d6cb5af05b8ac1be9098e249034639fbaffected
  • 4180bf1b655a791a0a6ef93a2ffffc762722c782 to < c87bd4dd43a624109c3cc42d843138378a7f4548affected

Linux Linux

Default version status: affected

  • 4.19affected
  • 0 to < 4.19unaffected
  • 5.4.298 to ≤ 5.4.*unaffected
  • 5.10.242 to ≤ 5.10.*unaffected
  • 5.15.191 to ≤ 5.15.*unaffected
  • 6.1.150 to ≤ 6.1.*unaffected
  • 6.6.104 to ≤ 6.6.*unaffected
  • 6.12.45 to ≤ 6.12.*unaffected
  • 6.16.5 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References