In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.
On exit from a BPF program, emit the BHB mititgation sequence.
This is only applied for 'classic' cBPF programs that are loaded by seccomp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel6.12 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade dtb-exynosUpgrade kernel-symsUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-default-extra | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinxUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegra | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub