In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.
On exit from a BPF program, emit the BHB mititgation sequence.
This is only applied for 'classic' cBPF programs that are loaded by seccomp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftoolUpgrade perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-debuginfo | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amd | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-raspiUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1096-azure-fips | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub