---
id: CVE-2025-37948
title: 'arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs

  A malicious BPF program may manipulate the branch history to influence
  what the hardware speculates wi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    c6a8735d841bcb7649734bb3a787bb174c67c0d8
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    993f63239c219696aef8887a4e7d3a16bf5a8ece
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    8fe5c37b0e08a97cf0210bb75970e945aaaeebab
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    42a20cf51011788f04cf2adbcd7681f02bdb6c27
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    852b8ae934b5cbdc62496fa56ce9969aa2edda7f
  - >-
    Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 <
    0dfefc2ea2f29ced2416017d7e5b1253a54c2735
  - Linux 3.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:45:35.502598Z'
published: '2025-05-20'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:52:09.020Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37948'
references:
  - url: 'https://git.kernel.org/stable/c/c6a8735d841bcb7649734bb3a787bb174c67c0d8'
  - url: 'https://git.kernel.org/stable/c/993f63239c219696aef8887a4e7d3a16bf5a8ece'
  - url: 'https://git.kernel.org/stable/c/8fe5c37b0e08a97cf0210bb75970e945aaaeebab'
  - url: 'https://git.kernel.org/stable/c/42a20cf51011788f04cf2adbcd7681f02bdb6c27'
  - url: 'https://git.kernel.org/stable/c/38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78'
  - url: 'https://git.kernel.org/stable/c/852b8ae934b5cbdc62496fa56ce9969aa2edda7f'
  - url: 'https://git.kernel.org/stable/c/0dfefc2ea2f29ced2416017d7e5b1253a54c2735'
tags:
  - cve.org
epss: 0.00208
epssPercentile: 0.10992
ingestedAt: '2026-11-05T22:38:31.897Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs

A malicious BPF program may manipulate the branch history to influence
what the hardware speculates will happen next.

On exit from a BPF program, emit the BHB mititgation sequence.

This is only applied for 'classic' cBPF programs that are loaded by
seccomp.

## Affected

- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < c6a8735d841bcb7649734bb3a787bb174c67c0d8`
- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 993f63239c219696aef8887a4e7d3a16bf5a8ece`
- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 8fe5c37b0e08a97cf0210bb75970e945aaaeebab`
- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 42a20cf51011788f04cf2adbcd7681f02bdb6c27`
- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78`
- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 852b8ae934b5cbdc62496fa56ce9969aa2edda7f`
- `Linux >= 0be7320a635c2e434e8b67e0e9474a85ceb421c4 < 0dfefc2ea2f29ced2416017d7e5b1253a54c2735`
- `Linux 3.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.