In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel6.12Upgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-static | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-rtUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-amazonUpgrade dlm-kmp-azure | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-raspi-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-gcp-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-generic-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-genericUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub