In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.239-236.958Upgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade python3-perf6.12Upgrade python3-perf-debuginfoUpgrade perfUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-devel | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-manUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-default | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-gcp-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-aws-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-156-fips | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub