In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.239-236.958 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-devel | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-syms | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-raspi-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-20.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub