USN-7862-2

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-7862-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7862-2.json
JSON Data
https://api.osv.dev/v1/vulns/USN-7862-2
Upstream
Related
Published
2025-11-10T09:54:46.923039Z
Modified
2025-11-11T08:17:31.498346Z
Summary
linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-raspi vulnerability
Details

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS.

References

Affected packages

Ubuntu:Pro:20.04:LTS / linux-nvidia-tegra-5.15

Package

Name
linux-nvidia-tegra-5.15
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-5.15@5.15.0-1048.48~20.04.1?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.0-1048.48~20.04.1

Affected versions

5.*

5.15.0-1009.9~20.04.1
5.15.0-1010.10~20.04.1
5.15.0-1012.12~20.04.1
5.15.0-1014.14~20.04.1
5.15.0-1015.15~20.04.1
5.15.0-1016.16~20.04.1
5.15.0-1017.17~20.04.1
5.15.0-1018.18~20.04.1
5.15.0-1019.19~20.04.1
5.15.0-1020.20~20.04.1
5.15.0-1022.22~20.04.1
5.15.0-1025.25~20.04.1
5.15.0-1027.27~20.04.1
5.15.0-1030.30~20.04.1
5.15.0-1032.32~20.04.1
5.15.0-1039.39~20.04.1
5.15.0-1040.40~20.04.1
5.15.0-1041.41~20.04.1
5.15.0-1042.42~20.04.1
5.15.0-1043.43~20.04.1
5.15.0-1044.44~20.04.1
5.15.0-1045.45~20.04.1
5.15.0-1046.46~20.04.1
5.15.0-1047.47~20.04.1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-buildinfo-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-buildinfo-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-headers-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-headers-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-image-unsigned-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-image-unsigned-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-modules-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-modules-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-modules-extra-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-nvidia-tegra-5.15-headers-5.15.0-1048"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-nvidia-tegra-5.15-tools-5.15.0-1048"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-tools-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48~20.04.1",
            "binary_name": "linux-tools-5.15.0-1048-nvidia-tegra-rt"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:20.04:LTS",
    "cves": [
        {
            "id": "CVE-2025-40300",
            "severity": [
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ]
}

Ubuntu:22.04:LTS / linux-nvidia-tegra

Package

Name
linux-nvidia-tegra
Purl
pkg:deb/ubuntu/linux-nvidia-tegra@5.15.0-1048.48?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.0-1048.48

Affected versions

5.*

5.15.0-1009.9
5.15.0-1010.10
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1014.14
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1017.17
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1025.25
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1030.30
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36
5.15.0-1037.37
5.15.0-1038.38
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1043.43
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-buildinfo-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-buildinfo-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-headers-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-headers-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-image-unsigned-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-image-unsigned-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-modules-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-modules-5.15.0-1048-nvidia-tegra-rt"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-modules-extra-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-nvidia-tegra-headers-5.15.0-1048"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-nvidia-tegra-tools-5.15.0-1048"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-tools-5.15.0-1048-nvidia-tegra"
        },
        {
            "binary_version": "5.15.0-1048.48",
            "binary_name": "linux-tools-5.15.0-1048-nvidia-tegra-rt"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": [
        {
            "id": "CVE-2025-40300",
            "severity": [
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ]
}

Ubuntu:22.04:LTS / linux-nvidia-tegra-igx

Package

Name
linux-nvidia-tegra-igx
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-igx@5.15.0-1037.37?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.0-1037.37

Affected versions

5.*

5.15.0-1001.1
5.15.0-1002.2
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1009.9
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1023.23
5.15.0-1024.24
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1029.29
5.15.0-1030.30
5.15.0-1031.31
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-buildinfo-5.15.0-1037-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-buildinfo-5.15.0-1037-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-headers-5.15.0-1037-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-headers-5.15.0-1037-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-image-unsigned-5.15.0-1037-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-image-unsigned-5.15.0-1037-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-modules-5.15.0-1037-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-modules-5.15.0-1037-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-modules-extra-5.15.0-1037-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-nvidia-tegra-igx-headers-5.15.0-1037"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-nvidia-tegra-igx-tools-5.15.0-1037"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-tools-5.15.0-1037-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1037.37",
            "binary_name": "linux-tools-5.15.0-1037-nvidia-tegra-igx-rt"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": [
        {
            "id": "CVE-2025-40300",
            "severity": [
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ]
}

Ubuntu:22.04:LTS / linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi@5.15.0-1090.93?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.0-1090.93

Affected versions

5.*

5.13.0-1008.9
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1008.8
5.15.0-1011.13
5.15.0-1012.14
5.15.0-1013.15
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.20
5.15.0-1021.23
5.15.0-1022.24
5.15.0-1023.25
5.15.0-1024.26
5.15.0-1025.27
5.15.0-1026.28
5.15.0-1027.29
5.15.0-1028.30
5.15.0-1029.31
5.15.0-1030.32
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1035.38
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1040.43
5.15.0-1041.44
5.15.0-1042.45
5.15.0-1043.46
5.15.0-1044.47
5.15.0-1045.48
5.15.0-1046.49
5.15.0-1047.50
5.15.0-1048.51
5.15.0-1049.52
5.15.0-1050.53
5.15.0-1053.56
5.15.0-1054.57
5.15.0-1055.58
5.15.0-1058.61
5.15.0-1059.62
5.15.0-1060.63
5.15.0-1061.64
5.15.0-1062.65
5.15.0-1063.66
5.15.0-1064.67
5.15.0-1065.68
5.15.0-1066.69
5.15.0-1067.70
5.15.0-1070.73
5.15.0-1071.74
5.15.0-1072.75
5.15.0-1073.76
5.15.0-1074.77
5.15.0-1075.78
5.15.0-1076.79
5.15.0-1077.80
5.15.0-1078.81
5.15.0-1079.82
5.15.0-1080.83
5.15.0-1083.86
5.15.0-1084.87
5.15.0-1085.88
5.15.0-1086.89
5.15.0-1087.90
5.15.0-1089.92

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-buildinfo-5.15.0-1090-raspi"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-headers-5.15.0-1090-raspi"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-image-5.15.0-1090-raspi"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-modules-5.15.0-1090-raspi"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-modules-extra-5.15.0-1090-raspi"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-raspi-headers-5.15.0-1090"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-raspi-tools-5.15.0-1090"
        },
        {
            "binary_version": "5.15.0-1090.93",
            "binary_name": "linux-tools-5.15.0-1090-raspi"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": [
        {
            "id": "CVE-2025-40300",
            "severity": [
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ]
}