Yeah there were also some LPEs due to bugs in the BPF verifier via unprivileged BPF. One can also check

system_controls

to see if unprivileged BPF is enabled.