{"id":"CVE-2025-37948","title":"arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Add BHB mitigation to the epilogue for cBPF programs\n\nA malicious BPF program may manipulate the branch history to influence\nwhat the hardware speculates wi…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < c6a8735d841bcb7649734bb3a787bb174c67c0d8","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 993f63239c219696aef8887a4e7d3a16bf5a8ece","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 8fe5c37b0e08a97cf0210bb75970e945aaaeebab","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 42a20cf51011788f04cf2adbcd7681f02bdb6c27","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 852b8ae934b5cbdc62496fa56ce9969aa2edda7f","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 0dfefc2ea2f29ced2416017d7e5b1253a54c2735","Linux 3.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:45:35.502598Z"},"published":"2025-05-20","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:52:09.020Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37948","references":[{"url":"https://git.kernel.org/stable/c/c6a8735d841bcb7649734bb3a787bb174c67c0d8"},{"url":"https://git.kernel.org/stable/c/993f63239c219696aef8887a4e7d3a16bf5a8ece"},{"url":"https://git.kernel.org/stable/c/8fe5c37b0e08a97cf0210bb75970e945aaaeebab"},{"url":"https://git.kernel.org/stable/c/42a20cf51011788f04cf2adbcd7681f02bdb6c27"},{"url":"https://git.kernel.org/stable/c/38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78"},{"url":"https://git.kernel.org/stable/c/852b8ae934b5cbdc62496fa56ce9969aa2edda7f"},{"url":"https://git.kernel.org/stable/c/0dfefc2ea2f29ced2416017d7e5b1253a54c2735"}],"tags":["cve.org"],"epss":0.00208,"epssPercentile":0.10992,"ingestedAt":"2026-11-05T22:38:31.897Z","slug":"CVE-2025-37948","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Add BHB mitigation to the epilogue for cBPF programs\n\nA malicious BPF program may manipulate the branch history to influence\nwhat the hardware speculates will happen next.\n\nOn exit from a BPF program, emit the BHB mititgation sequence.\n\nThis is only applied for 'classic' cBPF programs that are loaded by\nseccomp.\n\n## Affected\n\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < c6a8735d841bcb7649734bb3a787bb174c67c0d8`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 993f63239c219696aef8887a4e7d3a16bf5a8ece`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 8fe5c37b0e08a97cf0210bb75970e945aaaeebab`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 42a20cf51011788f04cf2adbcd7681f02bdb6c27`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 852b8ae934b5cbdc62496fa56ce9969aa2edda7f`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 0dfefc2ea2f29ced2416017d7e5b1253a54c2735`\n- `Linux 3.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}