CVE-2026-64507
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.
SeverityUnknown
CVSS—
Exploit probability14. percentile0.2%
Product
Linux
PublishedJul 25, 2026
First seenJul 25, 2026
How to fix
Update
- Linux Linux25dbcd31781e2bc3cd63d873af1fcd06f863a126, cb27f3bf915cc0f20fc0c48da9059304e39ebd35, 9354248fc1c33a844ca1872761f6668b393e8c37, 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1, 52440e15d9628f8f239373c0f2e5e8f92feea2df, a3af84b0fa00ead01fcd0e28b5d773ff25990a0d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 57631054fae6dcc9c892ae6310b58bbb6f6e5048 ≤ v < 25dbcd31781e2bc3cd63d873af1fcd06f863a126, 57631054fae6dcc9c892ae6310b58bbb6f6e5048 ≤ v < cb27f3bf915cc0f20fc0c48da9059304e39ebd35, 57631054fae6dcc9c892ae6310b58bbb6f6e5048 ≤ v < 9354248fc1c33a844ca1872761f6668b393e8c37, 57631054fae6dcc9c892ae6310b58bbb6f6e5048 ≤ v < 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1, 57631054fae6dcc9c892ae6310b58bbb6f6e5048 ≤ v < 52440e15d9628f8f239373c0f2e5e8f92feea2df, 57631054fae6dcc9c892ae6310b58bbb6f6e5048 ≤ v < a3af84b0fa00ead01fcd0e28b5d773ff25990a0d, 5.18 | 25dbcd31781e2bc3cd63d873af1fcd06f863a126, cb27f3bf915cc0f20fc0c48da9059304e39ebd35, 9354248fc1c33a844ca1872761f6668b393e8c37, 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1, 52440e15d9628f8f239373c0f2e5e8f92feea2df, a3af84b0fa00ead01fcd0e28b5d773ff25990a0d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.