In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade python3-perfUpgrade kernel-livepatch-6.1.140-154.222Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade kernel-default-manUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-optional | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-awsUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-azureUpgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-intelUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-kvmUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtualUpgrade linux-image-aws-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-gcp-lts-22.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub