In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: Fix fp initialization for exception boundary
In the ARM64 BPF JIT when prog->aux->exception_boundary is set for a BPF program, find_used_callee_regs() is not called because for a program acting as exception boundary, all callee saved registers are saved. find_used_callee_regs() sets `ctx->fp_used = true;` when it sees FP being used in any of the instructions.
For programs acting as exception boundary, ctx->fp_used remains false even if frame pointer is used by the program and therefore, FP is not set-up for such programs in the prologue. This can cause the kernel to crash due to a pagefault.
Fix it by setting ctx->fp_used = true for exception boundary programs as fp is always saved in such programs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade perf6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade python3-perf6.12Upgrade bpftool6.12-debuginfo | Sep 30, 2025 | Aug 19, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Aug 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 19, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade dtb-exynos | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-6.14Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-6.14 | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub