CVE - CVE-2025-37963

CVE-ID
CVE-2025-37963	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB. In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/477481c4348268136227348984b6699d6370b685 URL:https://git.kernel.org/stable/c/477481c4348268136227348984b6699d6370b685 MISC:https://git.kernel.org/stable/c/6e52d043f7dbf1839a24a3fab2b12b0d3839de7a URL:https://git.kernel.org/stable/c/6e52d043f7dbf1839a24a3fab2b12b0d3839de7a MISC:https://git.kernel.org/stable/c/80251f62028f1ab2e09be5ca3123f84e8b00389a URL:https://git.kernel.org/stable/c/80251f62028f1ab2e09be5ca3123f84e8b00389a MISC:https://git.kernel.org/stable/c/e5f5100f1c64ac6c72671b2cf6b46542fce93706 URL:https://git.kernel.org/stable/c/e5f5100f1c64ac6c72671b2cf6b46542fce93706 MISC:https://git.kernel.org/stable/c/f300769ead032513a68e4a02e806393402e626f8 URL:https://git.kernel.org/stable/c/f300769ead032513a68e4a02e806393402e626f8
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)