A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.49/6.16.9. Impacted is the function get_helper_proto of the component bpf. Such manipulation leads to privilege escalation.

This vulnerability is uniquely identified as CVE-2025-39990. The attack can only be initiated within the local network. No exploit exists.

You should upgrade the affected component.