In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-livepatch-6.1.140-154.222Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-obs-qaUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-obs-build | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-gke-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azureUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-kvm-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-fips-6.8 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub