Status: IN
In RHEL 9, unprivileged BPF access is restricted by default (`unprivileged_bpf_disabled = 2`), meaning the `bpf()` syscall is limited to privileged users but an admin can change this.
Source: repo:entries/2026/03/03/en-documentation-red_hat_enterprise_linux-9-html-93_release_notes-available_bpf_.md