In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.
On exit from a BPF program, emit the BHB mititgation sequence.
This is only applied for 'classic' cBPF programs that are loaded by seccomp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-develUpgrade bpftool | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdso | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-24.04cUpgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-aws-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oracle-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-ibmUpgrade linux-image-azure-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub