VYPR
Medium severity5.5NVD Advisory· Published May 20, 2025· Updated Jun 17, 2026

CVE-2025-37963

CVE-2025-37963

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users

Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB.

In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

180

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.