CVE-2025-37948

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs

A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next.

On exit from a BPF program, emit the BHB mititgation sequence.

This is only applied for 'classic' cBPF programs that are loaded by seccomp.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < c6a8735d841bcb7649734bb3a787bb174c67c0d8; >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < 993f63239c219696aef8887a4e7d3a16bf5a8ece; >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < 8fe5c37b0e08a97cf0210bb75970e945aaaeebab; >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < 42a20cf51011788f04cf2adbcd7681f02bdb6c27; >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < 38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78; >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < 852b8ae934b5cbdc62496fa56ce9969aa2edda7f; >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4, < 0dfefc2ea2f29ced2416017d7e5b1253a54c2735
LinuxLinux3.7

References

Timeline

Published
May 20, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-379495.5In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL poCVE-2025-37953.4A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the coCVE-2025-379505.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfCVE-2025-379515.5In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSCVE-2025-379527.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible CVE-2025-379535.5In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_deactivate() idempotent Alan reported a NULL pointerCVE-2025-379545.5In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-exiCVE-2025-379555.5In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The sCVE-2025-379565.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname CVE-2025-379577.8In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously,CVE-2025-379585.5In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migCVE-2025-379595.5In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used
CVE-2025-37948: Medium severity, CVSS 5.5 | Vulnix