In the Linux kernel, the following vulnerability has been resolved:
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.
In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade perf6.12Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-livepatch-6.1.140-154.222Upgrade python3-perfUpgrade kernel-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel6.12Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfo | Aug 5, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 25, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade kernel-default-manUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-sprdUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dlm-kmp-64kb | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-azure-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-virtual-hwe-24.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub