{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-37963",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-37963",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-05-20T16:01:55.322Z",
    "updatedAt": "2026-05-11T21:18:37.576Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Only mitigate cBPF programs loaded by unprivileged users\n\nSupport for eBPF programs loaded by unprivileged users is typically\ndisabled. This means only cBPF programs need to be mitigated for BHB.\n\nIn addition, only mitigate cBPF programs that were loaded by an\nunprivileged user. Privileged users can also load the same program\nvia eBPF, making the mitigation pointless.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "038866e01ea5e5a3d948898ac216e531e7848669"
            },
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "df53d418709205450a02bb4d71cbfb4ff86f2c1e"
            },
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "6e52d043f7dbf1839a24a3fab2b12b0d3839de7a"
            },
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "80251f62028f1ab2e09be5ca3123f84e8b00389a"
            },
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e5f5100f1c64ac6c72671b2cf6b46542fce93706"
            },
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "477481c4348268136227348984b6699d6370b685"
            },
            {
              "version": "0be7320a635c2e434e8b67e0e9474a85ceb421c4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f300769ead032513a68e4a02e806393402e626f8"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.7",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.7"
            },
            {
              "version": "5.10.239",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.186",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.139",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.91",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.29",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.14.7",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.14.*"
            },
            {
              "version": "6.15",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}