In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: use arrayindexnospec with indices that come from guest
min and destid are guest-controlled indices. Using arrayindex_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.
[
    {
        "id": "CVE-2025-39823-0e907a7d",
        "target": {
            "function": "kvm_sched_yield",
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c87bd4dd43a624109c3cc42d843138378a7f4548",
        "digest": {
            "function_hash": "271508708237346016568596938996604940614",
            "length": 601.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-17c5ea03",
        "target": {
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f57a4bd8d6cb5af05b8ac1be9098e249034639fb",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "151536284646819617953282235034013243226",
                "202659449595887897020495346344743141725",
                "24236834183257573923887140922124797406",
                "59455061785417697661814071417702838536",
                "315151417299123793123635720531855675722"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-3c159eb0",
        "target": {
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "113631887884461169811177517663402128433",
                "193857957479729429282195104967483139669",
                "2074583880238874175989322523672444954"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-4600422a",
        "target": {
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c87bd4dd43a624109c3cc42d843138378a7f4548",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "151536284646819617953282235034013243226",
                "202659449595887897020495346344743141725",
                "24236834183257573923887140922124797406",
                "59455061785417697661814071417702838536",
                "315151417299123793123635720531855675722"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-461a360e",
        "target": {
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f49161646e03d107ce81a99c6ca5da682fe5fb69",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "113631887884461169811177517663402128433",
                "193857957479729429282195104967483139669",
                "2074583880238874175989322523672444954"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-480345a3",
        "target": {
            "function": "__pv_send_ipi",
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c87bd4dd43a624109c3cc42d843138378a7f4548",
        "digest": {
            "function_hash": "161461961832355608570336141280691155771",
            "length": 441.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-524bb375",
        "target": {
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f49161646e03d107ce81a99c6ca5da682fe5fb69",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "151536284646819617953282235034013243226",
                "202659449595887897020495346344743141725",
                "24236834183257573923887140922124797406",
                "59455061785417697661814071417702838536",
                "315151417299123793123635720531855675722"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-5c9fdde1",
        "target": {
            "function": "kvm_sched_yield",
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f",
        "digest": {
            "function_hash": "271508708237346016568596938996604940614",
            "length": 601.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-63b1ed8a",
        "target": {
            "function": "kvm_sched_yield",
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f49161646e03d107ce81a99c6ca5da682fe5fb69",
        "digest": {
            "function_hash": "271508708237346016568596938996604940614",
            "length": 601.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-69d57bbc",
        "target": {
            "function": "__pv_send_ipi",
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f",
        "digest": {
            "function_hash": "161461961832355608570336141280691155771",
            "length": 441.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-76b16a32",
        "target": {
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31a0ad2f60cb4816e06218b63e695eb72ce74974",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "257088386552264343001743955338385371719",
                "279624530813766314956490410606540097439",
                "82723035313593347035353068378047368140",
                "142376133059234727967615088808953544860",
                "7481305589700128346338898501608930253"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-7a0f7ed0",
        "target": {
            "function": "__pv_send_ipi",
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31a0ad2f60cb4816e06218b63e695eb72ce74974",
        "digest": {
            "function_hash": "161461961832355608570336141280691155771",
            "length": 441.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-8f21c0e6",
        "target": {
            "function": "__pv_send_ipi",
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f49161646e03d107ce81a99c6ca5da682fe5fb69",
        "digest": {
            "function_hash": "161461961832355608570336141280691155771",
            "length": 441.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-9d056c36",
        "target": {
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c87bd4dd43a624109c3cc42d843138378a7f4548",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "113631887884461169811177517663402128433",
                "193857957479729429282195104967483139669",
                "2074583880238874175989322523672444954"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-9f0b1420",
        "target": {
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f57a4bd8d6cb5af05b8ac1be9098e249034639fb",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "113631887884461169811177517663402128433",
                "193857957479729429282195104967483139669",
                "2074583880238874175989322523672444954"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-e79070f6",
        "target": {
            "function": "__pv_send_ipi",
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f57a4bd8d6cb5af05b8ac1be9098e249034639fb",
        "digest": {
            "function_hash": "161461961832355608570336141280691155771",
            "length": 441.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-ee0ac12d",
        "target": {
            "function": "kvm_sched_yield",
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31a0ad2f60cb4816e06218b63e695eb72ce74974",
        "digest": {
            "function_hash": "329206838261629798500797761995527214348",
            "length": 362.0
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-f6d1a3ba",
        "target": {
            "file": "arch/x86/kvm/lapic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31a0ad2f60cb4816e06218b63e695eb72ce74974",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "113631887884461169811177517663402128433",
                "193857957479729429282195104967483139669",
                "2074583880238874175989322523672444954"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-f7efe463",
        "target": {
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "151536284646819617953282235034013243226",
                "202659449595887897020495346344743141725",
                "24236834183257573923887140922124797406",
                "59455061785417697661814071417702838536",
                "315151417299123793123635720531855675722"
            ]
        },
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-39823-ff092bf9",
        "target": {
            "function": "kvm_sched_yield",
            "file": "arch/x86/kvm/x86.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f57a4bd8d6cb5af05b8ac1be9098e249034639fb",
        "digest": {
            "function_hash": "271508708237346016568596938996604940614",
            "length": 601.0
        },
        "deprecated": false,
        "signature_version": "v1"
    }
]