In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.
On exit from a BPF program, emit the BHB mititgation sequence.
This is only applied for 'classic' cBPF programs that are loaded by seccomp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-livepatch-6.1.140-154.222Upgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-source | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azure-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intelUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oracle-lts-24.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub