In the Linux kernel, the following vulnerability has been resolved:
x86/vmscape: Add conditional IBPB mitigation
VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch predictors after a VMexit.
Since it is the userspace that consumes the poisoned branch predictors, conditionally issue an IBPB after a VMexit and before returning to userspace. Workloads that frequently switch between hypervisor and userspace will incur the most overhead from the new IBPB.
This new IBPB is not integrated with the existing IBPB sites. For instance, a task can use the existing speculation control prctl() to get an IBPB at context switch time. With this implementation, the IBPB is doubled up: one at context switch and another before running userspace.
The intent is to integrate and optimize these cases post-embargo.
[ dhansen: elaborate on suboptimal IBPB solution ]
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"183829994143243976557281180656292396297",
"135873892335221498162831207749095848320",
"161825012757371968793956815459117912856"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-00f9e6a3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f8f173413f1cbf52660d04df92d0069c4306d25",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"149804020026167160073190975957496655561",
"98533031750945665353666361417025868713",
"282910455789896710635105135970093829117"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-0442bc59",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5490dfa35427a2967e00a4c7a1b95fdbc8ede34",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "235093329020172248875582483756942644368",
"length": 295.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-06dd49b7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7ddc93392e4a7ffcccc86edf6ef3e64c778db52",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "209850483718785244350394394264749417087",
"length": 1445.0
},
"target": {
"function": "cpu_show_common",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-0756469e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c08192b5d6730a914dee6175bc71092ee6a65f14",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "209850483718785244350394394264749417087",
"length": 1445.0
},
"target": {
"function": "cpu_show_common",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-088ef896",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@893387c18612bb452336a5881da0d015a7e8f4a2",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"49340886391038258150011559280091074912",
"325431147952174718552589690737607515440",
"320296703796721084144673216515527334177"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-113fa300",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15006289e5c38b2a830e1fba221977a27598176c",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"90877916198431969443103945735675742458",
"203602264845457653711418987471355363694",
"39121573068653642800620595324296867449",
"67192442289939501371249060315944353436",
"258825290896099523945826608163917478085",
"119857799155731523292564637012652235093",
"185811010505516319552008940406551887553",
"120932114399681630282065022559932348803",
"26282237805888418930240849264111905888",
"158268529947324970564766954280070648884",
"215796575441498033396512065838662766489",
"294710521016296031591575414181678143668"
]
},
"target": {
"file": "drivers/base/cpu.c"
},
"id": "CVE-2025-40300-1f12486f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c23a90648e831d611152ac08dbcd1283d405e7f",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "122864174762491970373301284386920910626",
"length": 1474.0
},
"target": {
"function": "cpu_show_common",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-21d23ad0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c23a90648e831d611152ac08dbcd1283d405e7f",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"199893521052053665522497492823819662201",
"60125690418153591664041822321712912505",
"292464884115997901355608353931325968799",
"128687046708524457374399901891886730085"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-28e3c58c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f866eef8d1c65504d30923c3f14082ad294d0e6d",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "340089801894561871569294194209552241519",
"length": 392.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-2b98467e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5490dfa35427a2967e00a4c7a1b95fdbc8ede34",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "283983011994484903353041720049874317759",
"length": 273.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-34bb40ed",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f8f173413f1cbf52660d04df92d0069c4306d25",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "120245064327570060335420872794145465733",
"length": 414.0
},
"target": {
"function": "cpu_select_mitigations",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-3affc21e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459274c77b37ac63b78c928b4b4e748d1f9d05c8",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228986932212359978778409265772160531425",
"271165551919042031904790394336649109114",
"199373217581534130750986986015889139170",
"79766004514171225205753181314870057723"
]
},
"target": {
"file": "include/linux/cpu.h"
},
"id": "CVE-2025-40300-3c01b40c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c08192b5d6730a914dee6175bc71092ee6a65f14",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"169182549455019653911309711438494973519",
"120600453989922749471777018256206506065",
"195909953287641801679799515224001354997",
"180356958243742122026601194934093974250",
"26871166793096458658394865130308842114",
"44262905323638058762991977354583888971",
"149237055012597736877394367145001916682",
"8657681025793173923472423506107513624",
"7487675467962177633268803933797921691",
"47459077202655009233241099101951590950",
"16220297210313614338880780605877534441",
"319027829738990930383088142907781782475",
"193136322376012301760796530690252382980",
"142215015795156933097279667707437540106",
"186715498640385174303630432543021537403",
"34197361850978228175996917701756306622",
"295842921071673020937681599068565034085",
"63717700392211150699183096699822250603",
"296083765563120833047678691101563782194"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-3c0fa006",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@893387c18612bb452336a5881da0d015a7e8f4a2",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"199893521052053665522497492823819662201",
"60125690418153591664041822321712912505",
"292464884115997901355608353931325968799",
"128687046708524457374399901891886730085"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-3d12c017",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@510603f504796c3535f67f55fb0b124a303b44c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204604860185747455817195344785220762348",
"14775233493738798461365898049856827342",
"195909953287641801679799515224001354997",
"180356958243742122026601194934093974250",
"26871166793096458658394865130308842114",
"44262905323638058762991977354583888971",
"149237055012597736877394367145001916682",
"8657681025793173923472423506107513624",
"7487675467962177633268803933797921691",
"47459077202655009233241099101951590950",
"16220297210313614338880780605877534441",
"319027829738990930383088142907781782475",
"193136322376012301760796530690252382980",
"142215015795156933097279667707437540106",
"186715498640385174303630432543021537403",
"34197361850978228175996917701756306622",
"295842921071673020937681599068565034085",
"63717700392211150699183096699822250603",
"296083765563120833047678691101563782194"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-3de2d606",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e5667041050711a947e260fc9ebebe08bddee5",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"106852168020159501255358469849461743799",
"331517052430781566606660044540958980729",
"239949498517863041118422523776124517646",
"191580235202415568342958311404842613799"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-40e53ca6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5490dfa35427a2967e00a4c7a1b95fdbc8ede34",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"136318341546492793313584108712007575538",
"298894348259868801114784324103860510880",
"45890037457778004977177646196328657297"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-44e9be59",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5490dfa35427a2967e00a4c7a1b95fdbc8ede34",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "309617775819424185841615229621781365326",
"length": 1445.0
},
"target": {
"function": "cpu_show_common",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-4cb5fc68",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459274c77b37ac63b78c928b4b4e748d1f9d05c8",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"199893521052053665522497492823819662201",
"60125690418153591664041822321712912505",
"292464884115997901355608353931325968799",
"128687046708524457374399901891886730085"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-4e0ec40f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f8f173413f1cbf52660d04df92d0069c4306d25",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "70469419545010055396418697938309118015",
"length": 365.0
},
"target": {
"function": "cpu_select_mitigations",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-53b41ee1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c08192b5d6730a914dee6175bc71092ee6a65f14",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "155117151945057434514178152915264083843",
"length": 357.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-5b1d5052",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac60717f9a8d21c58617d0b34274babf24135835",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "298717869216109063155398869915170415166",
"length": 864.0
},
"target": {
"function": "cpu_select_mitigations",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-621c6d54",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c23a90648e831d611152ac08dbcd1283d405e7f",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316486149915764211480819407519703266874",
"142932314086871922451905060553246914914",
"186094133701315633032415666250732037041"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-6563c9a1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5490dfa35427a2967e00a4c7a1b95fdbc8ede34",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"84083017554608111808457614106675582449",
"209948095045231182739122863496418643654",
"254556149265159899433242570001491797582",
"302872802798355403159840395222395613236",
"289570190409346265722250344508906939637",
"122144668669716196656425080300481692148",
"275808861462924563824578195990259248827",
"261623381217221762858889786743125674122",
"106866240855501210465674348860381656306",
"123302524159097331135006658842065987209",
"161383701512338557258540046514039472778",
"295213027520458287580389865365368419123",
"187821296674931682138205979740413229030",
"152029466888069176948813492102715562775",
"723167228784278093450152905280155456",
"196834859850565010735631572897620183814",
"56687057529781388985183736218475859774",
"204946067633148581323962748245106977600",
"16220297210313614338880780605877534441",
"319027829738990930383088142907781782475",
"193136322376012301760796530690252382980",
"142215015795156933097279667707437540106",
"186715498640385174303630432543021537403",
"34197361850978228175996917701756306622",
"295842921071673020937681599068565034085",
"63717700392211150699183096699822250603",
"296083765563120833047678691101563782194",
"249248377403421164744877556803030088132",
"271883335550167939457583034046252192949"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-67d3a33c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c23a90648e831d611152ac08dbcd1283d405e7f",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228986932212359978778409265772160531425",
"271165551919042031904790394336649109114",
"199373217581534130750986986015889139170",
"79766004514171225205753181314870057723"
]
},
"target": {
"file": "include/linux/cpu.h"
},
"id": "CVE-2025-40300-67f55820",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@893387c18612bb452336a5881da0d015a7e8f4a2",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "120245064327570060335420872794145465733",
"length": 414.0
},
"target": {
"function": "cpu_select_mitigations",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-6909a988",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251354313523022487222439284493986114210",
"325431147952174718552589690737607515440",
"320296703796721084144673216515527334177"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-73b5e0b6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7ddc93392e4a7ffcccc86edf6ef3e64c778db52",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "209850483718785244350394394264749417087",
"length": 1445.0
},
"target": {
"function": "cpu_show_common",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-7847cf44",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "315226701574269241183942977387898138351",
"length": 7752.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-7e4c750a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7ddc93392e4a7ffcccc86edf6ef3e64c778db52",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228986932212359978778409265772160531425",
"271165551919042031904790394336649109114",
"199373217581534130750986986015889139170",
"79766004514171225205753181314870057723"
]
},
"target": {
"file": "include/linux/cpu.h"
},
"id": "CVE-2025-40300-7ff800a1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e5667041050711a947e260fc9ebebe08bddee5",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316486149915764211480819407519703266874",
"142932314086871922451905060553246914914",
"186094133701315633032415666250732037041"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-808012ef",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f866eef8d1c65504d30923c3f14082ad294d0e6d",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "120245064327570060335420872794145465733",
"length": 414.0
},
"target": {
"function": "cpu_select_mitigations",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-82cf208f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@893387c18612bb452336a5881da0d015a7e8f4a2",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"149804020026167160073190975957496655561",
"98533031750945665353666361417025868713",
"282910455789896710635105135970093829117"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-859a4fbb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f866eef8d1c65504d30923c3f14082ad294d0e6d",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"183829994143243976557281180656292396297",
"250296084425686900668934333903045602645",
"139192480383323810010518755380977096052"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-87689ad8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7ddc93392e4a7ffcccc86edf6ef3e64c778db52",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118817324328125383370375087425472164333",
"327102883414880219194396555738336270640",
"3850748290489001590496225283047106524"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-8b88d095",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac60717f9a8d21c58617d0b34274babf24135835",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"327195954501841773021471313564469974303",
"159074767895716814146575873761544089279",
"252778158526984403187221896065841031851",
"319718932703475351685790779539102331440"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-8cfcd2ed",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac60717f9a8d21c58617d0b34274babf24135835",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "7707471678168333633747439149993363912",
"length": 7935.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-8f47e6ca",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@510603f504796c3535f67f55fb0b124a303b44c8",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "253144129618895888427232537825589805422",
"length": 385.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-9832f753",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15006289e5c38b2a830e1fba221977a27598176c",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"169182549455019653911309711438494973519",
"120600453989922749471777018256206506065",
"195909953287641801679799515224001354997",
"180356958243742122026601194934093974250",
"26871166793096458658394865130308842114",
"44262905323638058762991977354583888971",
"149237055012597736877394367145001916682",
"120225529642069387747184575369531988583",
"7487675467962177633268803933797921691",
"47459077202655009233241099101951590950",
"16220297210313614338880780605877534441",
"319027829738990930383088142907781782475",
"193136322376012301760796530690252382980",
"142215015795156933097279667707437540106",
"186715498640385174303630432543021537403",
"34197361850978228175996917701756306622",
"295842921071673020937681599068565034085",
"63717700392211150699183096699822250603",
"296083765563120833047678691101563782194"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-9e34bc25",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"149804020026167160073190975957496655561",
"98533031750945665353666361417025868713",
"282910455789896710635105135970093829117"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-9e4091a0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15006289e5c38b2a830e1fba221977a27598176c",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"282203356060089252326117103971602219446",
"59485042982044520979844347985781237876",
"290527115086662718441432184834818293669",
"184587300050175881415660378522060086681",
"55661072449267472078537652488577069668",
"197816870591606477193044139650766431269",
"185811010505516319552008940406551887553",
"120932114399681630282065022559932348803",
"79516170787699836290458422983255853471",
"102711582352893259834749132168647161876",
"215796575441498033396512065838662766489",
"294710521016296031591575414181678143668"
]
},
"target": {
"file": "drivers/base/cpu.c"
},
"id": "CVE-2025-40300-9e62db89",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c08192b5d6730a914dee6175bc71092ee6a65f14",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"199893521052053665522497492823819662201",
"60125690418153591664041822321712912505",
"292464884115997901355608353931325968799",
"128687046708524457374399901891886730085"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-9ebd023a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7ddc93392e4a7ffcccc86edf6ef3e64c778db52",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "309617775819424185841615229621781365326",
"length": 1445.0
},
"target": {
"function": "cpu_show_common",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-a2e49cb6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e5667041050711a947e260fc9ebebe08bddee5",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"269975446290157854069488122161209041968",
"330465632596842693310751677491494625127",
"133072466428955044133313371020687289809"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-a8e8972d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@510603f504796c3535f67f55fb0b124a303b44c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "283983011994484903353041720049874317759",
"length": 273.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-a9cbeb0c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@510603f504796c3535f67f55fb0b124a303b44c8",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228986932212359978778409265772160531425",
"271165551919042031904790394336649109114",
"199373217581534130750986986015889139170",
"79766004514171225205753181314870057723"
]
},
"target": {
"file": "include/linux/cpu.h"
},
"id": "CVE-2025-40300-aa4d4e21",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459274c77b37ac63b78c928b4b4e748d1f9d05c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228986932212359978778409265772160531425",
"271165551919042031904790394336649109114",
"199373217581534130750986986015889139170",
"79766004514171225205753181314870057723"
]
},
"target": {
"file": "include/linux/cpu.h"
},
"id": "CVE-2025-40300-afb9f9c8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "35732831983358336581144686813057762613",
"length": 6392.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-b50a2c98",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac60717f9a8d21c58617d0b34274babf24135835",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"269975446290157854069488122161209041968",
"330465632596842693310751677491494625127",
"133072466428955044133313371020687289809"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-b71c5b88",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f8f173413f1cbf52660d04df92d0069c4306d25",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"162416303751412984352805901429516956649",
"22052042683072046874764470887609815623",
"155215372047953019038766705484092982969"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-b97e2455",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f8f173413f1cbf52660d04df92d0069c4306d25",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "120245064327570060335420872794145465733",
"length": 414.0
},
"target": {
"function": "cpu_select_mitigations",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-bb4bc4d1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e5667041050711a947e260fc9ebebe08bddee5",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "111509416943279592705234033696512117904",
"length": 7563.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-c4eb5926",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15006289e5c38b2a830e1fba221977a27598176c",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "4383041722707425717749361197868965853",
"length": 7145.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-c5178d4d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5490dfa35427a2967e00a4c7a1b95fdbc8ede34",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "253144129618895888427232537825589805422",
"length": 385.0
},
"target": {
"function": "arch_exit_to_user_mode_prepare",
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-c6527e8a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f866eef8d1c65504d30923c3f14082ad294d0e6d",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316486149915764211480819407519703266874",
"142932314086871922451905060553246914914",
"186094133701315633032415666250732037041"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-c95999ad",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15006289e5c38b2a830e1fba221977a27598176c",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "204643839201877260861415324159393705602",
"length": 7491.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-cb9fa681",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f866eef8d1c65504d30923c3f14082ad294d0e6d",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"169182549455019653911309711438494973519",
"120600453989922749471777018256206506065",
"195909953287641801679799515224001354997",
"180356958243742122026601194934093974250",
"26871166793096458658394865130308842114",
"44262905323638058762991977354583888971",
"149237055012597736877394367145001916682",
"120225529642069387747184575369531988583",
"7487675467962177633268803933797921691",
"47459077202655009233241099101951590950",
"16220297210313614338880780605877534441",
"319027829738990930383088142907781782475",
"193136322376012301760796530690252382980",
"142215015795156933097279667707437540106",
"186715498640385174303630432543021537403",
"34197361850978228175996917701756306622",
"295842921071673020937681599068565034085",
"63717700392211150699183096699822250603",
"296083765563120833047678691101563782194"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-cc4d4c48",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c08192b5d6730a914dee6175bc71092ee6a65f14",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168410681248084469354613319612393784013",
"105603488661784763228656147952287366619",
"39121573068653642800620595324296867449",
"67192442289939501371249060315944353436",
"226137693528404262151915524223124753685",
"197816870591606477193044139650766431269",
"185811010505516319552008940406551887553",
"120932114399681630282065022559932348803",
"325959707125501796059876504611078768810",
"102711582352893259834749132168647161876",
"215796575441498033396512065838662766489",
"294710521016296031591575414181678143668"
]
},
"target": {
"file": "drivers/base/cpu.c"
},
"id": "CVE-2025-40300-ccf28723",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459274c77b37ac63b78c928b4b4e748d1f9d05c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204604860185747455817195344785220762348",
"14775233493738798461365898049856827342",
"195909953287641801679799515224001354997",
"180356958243742122026601194934093974250",
"26871166793096458658394865130308842114",
"44262905323638058762991977354583888971",
"149237055012597736877394367145001916682",
"8657681025793173923472423506107513624",
"314448169197700885703440173894848703249",
"204780532150947595156419810523683959202",
"16220297210313614338880780605877534441",
"319027829738990930383088142907781782475",
"193136322376012301760796530690252382980",
"142215015795156933097279667707437540106",
"186715498640385174303630432543021537403",
"34197361850978228175996917701756306622",
"295842921071673020937681599068565034085",
"63717700392211150699183096699822250603",
"296083765563120833047678691101563782194",
"249248377403421164744877556803030088132",
"271883335550167939457583034046252192949"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-cf6f2c36",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459274c77b37ac63b78c928b4b4e748d1f9d05c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168410681248084469354613319612393784013",
"105603488661784763228656147952287366619",
"39121573068653642800620595324296867449",
"67192442289939501371249060315944353436",
"226137693528404262151915524223124753685",
"197816870591606477193044139650766431269",
"185811010505516319552008940406551887553",
"120932114399681630282065022559932348803",
"325959707125501796059876504611078768810",
"102711582352893259834749132168647161876",
"215796575441498033396512065838662766489",
"294710521016296031591575414181678143668"
]
},
"target": {
"file": "drivers/base/cpu.c"
},
"id": "CVE-2025-40300-e0b901d7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e5667041050711a947e260fc9ebebe08bddee5",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"282203356060089252326117103971602219446",
"59485042982044520979844347985781237876",
"290527115086662718441432184834818293669",
"184587300050175881415660378522060086681",
"55661072449267472078537652488577069668",
"197816870591606477193044139650766431269",
"185811010505516319552008940406551887553",
"120932114399681630282065022559932348803",
"79516170787699836290458422983255853471",
"102711582352893259834749132168647161876",
"215796575441498033396512065838662766489",
"294710521016296031591575414181678143668"
]
},
"target": {
"file": "drivers/base/cpu.c"
},
"id": "CVE-2025-40300-e3bbfbce",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228986932212359978778409265772160531425",
"271165551919042031904790394336649109114",
"199373217581534130750986986015889139170",
"79766004514171225205753181314870057723"
]
},
"target": {
"file": "include/linux/cpu.h"
},
"id": "CVE-2025-40300-e71a1e77",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c23a90648e831d611152ac08dbcd1283d405e7f",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"183829994143243976557281180656292396297",
"135873892335221498162831207749095848320",
"161825012757371968793956815459117912856"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-eb12fc4c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@510603f504796c3535f67f55fb0b124a303b44c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"59485042982044520979844347985781237876",
"290527115086662718441432184834818293669",
"184587300050175881415660378522060086681",
"55661072449267472078537652488577069668",
"197816870591606477193044139650766431269",
"185811010505516319552008940406551887553",
"120932114399681630282065022559932348803",
"79516170787699836290458422983255853471",
"102711582352893259834749132168647161876",
"215796575441498033396512065838662766489",
"294710521016296031591575414181678143668"
]
},
"target": {
"file": "drivers/base/cpu.c"
},
"id": "CVE-2025-40300-eba070da",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@893387c18612bb452336a5881da0d015a7e8f4a2",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"162416303751412984352805901429516956649",
"22052042683072046874764470887609815623",
"155215372047953019038766705484092982969"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-eefd2527",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@510603f504796c3535f67f55fb0b124a303b44c8",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"49340886391038258150011559280091074912",
"325431147952174718552589690737607515440",
"320296703796721084144673216515527334177"
]
},
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-f03d0a7c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f866eef8d1c65504d30923c3f14082ad294d0e6d",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"199893521052053665522497492823819662201",
"60125690418153591664041822321712912505",
"292464884115997901355608353931325968799",
"128687046708524457374399901891886730085"
]
},
"target": {
"file": "arch/x86/include/asm/entry-common.h"
},
"id": "CVE-2025-40300-f3fc6bd8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15006289e5c38b2a830e1fba221977a27598176c",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"149804020026167160073190975957496655561",
"98533031750945665353666361417025868713",
"282910455789896710635105135970093829117"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-f5c99daa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac60717f9a8d21c58617d0b34274babf24135835",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316486149915764211480819407519703266874",
"142932314086871922451905060553246914914",
"339730646601091326465537895096054434722"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2025-40300-f761e098",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac60717f9a8d21c58617d0b34274babf24135835",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"149804020026167160073190975957496655561",
"98533031750945665353666361417025868713",
"282910455789896710635105135970093829117"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2025-40300-f9fd7ec3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7ddc93392e4a7ffcccc86edf6ef3e64c778db52",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "259851235908554276365762255039172892590",
"length": 7938.0
},
"target": {
"function": "vcpu_enter_guest",
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2025-40300-ffc62fb1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f8f173413f1cbf52660d04df92d0069c4306d25",
"signature_type": "Function"
}
]