CVE-2025-37963

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB. In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless.

• https://git.kernel.org/stable/c/038866e01ea5e5a3d948898ac216e531e7848669Patch
• https://git.kernel.org/stable/c/477481c4348268136227348984b6699d6370b685Patch
• https://git.kernel.org/stable/c/6e52d043f7dbf1839a24a3fab2b12b0d3839de7aPatch
• https://git.kernel.org/stable/c/80251f62028f1ab2e09be5ca3123f84e8b00389aPatch
• https://git.kernel.org/stable/c/df53d418709205450a02bb4d71cbfb4ff86f2c1ePatch
• https://git.kernel.org/stable/c/e5f5100f1c64ac6c72671b2cf6b46542fce93706Patch
• https://git.kernel.org/stable/c/f300769ead032513a68e4a02e806393402e626f8Patch
• https://lists.debian.org/debian-lts-announce/2025/08/msg00010.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlThird Party Advisory

Published

May 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-37958In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37959In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3796A vulnerability classified as critical has been found in PHP…8.8
• CVE-2025-37960In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37961In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37962In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37964In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37965In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37966In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37967In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37968In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37969In the Linux kernel, the following vulnerability has been re…5.5