{"id":"CVE-2025-37963","title":"arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Only mitigate cBPF programs loaded by unprivileged users\n\nSupport for eBPF programs loaded by unprivileged users is typically\ndisabled. This means only cBPF…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 038866e01ea5e5a3d948898ac216e531e7848669","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < df53d418709205450a02bb4d71cbfb4ff86f2c1e","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 6e52d043f7dbf1839a24a3fab2b12b0d3839de7a","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 80251f62028f1ab2e09be5ca3123f84e8b00389a","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < e5f5100f1c64ac6c72671b2cf6b46542fce93706","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 477481c4348268136227348984b6699d6370b685","Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < f300769ead032513a68e4a02e806393402e626f8","Linux 3.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:46:27.086546Z"},"published":"2025-05-20","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:52:09.677Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37963","references":[{"url":"https://git.kernel.org/stable/c/038866e01ea5e5a3d948898ac216e531e7848669"},{"url":"https://git.kernel.org/stable/c/df53d418709205450a02bb4d71cbfb4ff86f2c1e"},{"url":"https://git.kernel.org/stable/c/6e52d043f7dbf1839a24a3fab2b12b0d3839de7a"},{"url":"https://git.kernel.org/stable/c/80251f62028f1ab2e09be5ca3123f84e8b00389a"},{"url":"https://git.kernel.org/stable/c/e5f5100f1c64ac6c72671b2cf6b46542fce93706"},{"url":"https://git.kernel.org/stable/c/477481c4348268136227348984b6699d6370b685"},{"url":"https://git.kernel.org/stable/c/f300769ead032513a68e4a02e806393402e626f8"}],"tags":["cve.org"],"epss":0.00202,"epssPercentile":0.10184,"ingestedAt":"2026-11-05T22:38:31.898Z","slug":"CVE-2025-37963","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Only mitigate cBPF programs loaded by unprivileged users\n\nSupport for eBPF programs loaded by unprivileged users is typically\ndisabled. This means only cBPF programs need to be mitigated for BHB.\n\nIn addition, only mitigate cBPF programs that were loaded by an\nunprivileged user. Privileged users can also load the same program\nvia eBPF, making the mitigation pointless.\n\n## Affected\n\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 038866e01ea5e5a3d948898ac216e531e7848669`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < df53d418709205450a02bb4d71cbfb4ff86f2c1e`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 6e52d043f7dbf1839a24a3fab2b12b0d3839de7a`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 80251f62028f1ab2e09be5ca3123f84e8b00389a`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < e5f5100f1c64ac6c72671b2cf6b46542fce93706`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 477481c4348268136227348984b6699d6370b685`\n- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < f300769ead032513a68e4a02e806393402e626f8`\n- `Linux 3.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}