Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS.
6.14.0-1016.16~24.04.16.14.0-1019.20~24.04.16.14.0-1015.156.14.0-1016.16~24.04.16.14.0-35.356.14.0-1016.166.14.0-1019.206.14.0-1016.166.14.0-1017.176.14.0-1015.15