vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64507

x86/bugs: Enable IBPB flush on BPF JIT allocation

N/A
Published: July 25, 2026 at 08:52 AM UTC
Updated: August 19, 2026 at 05:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.18 ≤ v < 6.1.1835.18 ≤ v < 6.12.975.18 ≤ v < 6.18.395.18 ≤ v < 6.6.1455.18 ≤ v < 7.1.45.18 ≤ v < 7.25.1857631054fae6dcc9c892ae6310b58bbb6f6e5048
Vendor states this is fixed in 25dbcd31781e2bc3cd63d873af1fcd06f863a126 (fixed)
Vendor states this is fixed in 52440e15d9628f8f239373c0f2e5e8f92feea2df (fixed)
Vendor states this is fixed in 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1 (fixed)
Vendor states this is fixed in 9354248fc1c33a844ca1872761f6668b393e8c37 (fixed)
Vendor states this is fixed in a3af84b0fa00ead01fcd0e28b5d773ff25990a0d (fixed)
Vendor states this is fixed in cb27f3bf915cc0f20fc0c48da9059304e39ebd35 (fixed)
Vendor states this is fixed in 5.18 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (6)

Source: cverecord
https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35
Source: cverecord
https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37
Source: cverecord
https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
Source: cverecord
https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df
Source: cverecord
https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d
Source: cverecord
https://git.kernel.org/stable/c/25dbcd31781e2bc3cd63d873af1fcd06f863a126

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card