In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.
On exit from a BPF program, emit the BHB mititgation sequence.
This is only applied for 'classic' cBPF programs that are loaded by seccomp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-develUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade perfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-static | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade dtb-apple | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-azure-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-genericUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-ibmUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-6.14Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinxUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtualUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1010-realtime | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub