NetSight
IP …
medium5.5

CVE-2025-37948

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program ma…

Impact

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next. On exit from a BPF program, emit the BHB mititgation sequence. This is only applied for 'classic' cBPF programs that are loaded by seccomp.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.10.239
from 5.11 before 5.15.186
from 5.16 before 6.1.139
from 6.2 before 6.6.91
from 6.7 before 6.12.29
from 6.13 before 6.14.7
DebianDebian Linux
Version 11.0

References