Linux Distros Unpatched Vulnerability : CVE-2025-38586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception boundary In the ARM64 BPF JIT when...

CVE-2025-38586

In the ARM64 Linux kernel, the BPF JIT for a program acting as an exception boundary does not call find_used_callee_regs, so the frame pointer (FP) is not marked as used and FP is not set up in the prologue, risking a pagefault crash. The fix sets ctx->fp_used = true for exception-boundary pro...