In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.
On exit from a BPF program, emit the BHB mititgation sequence.
This is only applied for 'classic' cBPF programs that are loaded by seccomp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel6.12 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-defaultUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatch | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-24.04cUpgrade linux-image-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-intelUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub