CVE-2025-37963

arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users

published May 20, 2025

CVSS
—
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users

Support for eBPF programs loaded by unprivileged users is typically

disabled. This means only cBPF programs need to be mitigated for BHB.

In addition, only mitigate cBPF programs that were loaded by an

unprivileged user. Privileged users can also load the same program

via eBPF, making the mitigation pointless.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Published
2025-05-20T16:01Z
EPSS history
Timeline
  • 20 MAY 16:01Z
    arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
    cvelistv5