In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.10.239-236.958Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade python3-perfUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade bpftool-debuginfoUpgrade bpftool | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-renesas | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-intelUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-5.15Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-gke-64kUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-generic-5.15Upgrade linux-image-kvmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtualUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeop | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub