Riskcovery

CVE-2026-64507

x86/bugs: Enable IBPB flush on BPF JIT allocation

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence.

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 57631054fae6dcc9c892ae6310b58bbb6f6e5048 to before 25dbcd31781e2bc3cd63d873af1fcd06f863a126Affected
  • 57631054fae6dcc9c892ae6310b58bbb6f6e5048 to before cb27f3bf915cc0f20fc0c48da9059304e39ebd35Affected
  • 57631054fae6dcc9c892ae6310b58bbb6f6e5048 to before 9354248fc1c33a844ca1872761f6668b393e8c37Affected
  • 57631054fae6dcc9c892ae6310b58bbb6f6e5048 to before 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1Affected
  • 57631054fae6dcc9c892ae6310b58bbb6f6e5048 to before 52440e15d9628f8f239373c0f2e5e8f92feea2dfAffected
  • 57631054fae6dcc9c892ae6310b58bbb6f6e5048 to before a3af84b0fa00ead01fcd0e28b5d773ff25990a0dAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.183 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.