Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-64507

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-25 Jul, 2026 | 08:52
Updated At-25 Jul, 2026 | 08:52
Rejected At-
Credits

x86/bugs: Enable IBPB flush on BPF JIT allocation

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 08:52
Updated At:25 Jul, 2026 | 08:52
Rejected At:
▼CVE Numbering Authority (CNA)
x86/bugs: Enable IBPB flush on BPF JIT allocation

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • arch/x86/include/asm/nospec-branch.h
  • arch/x86/kernel/cpu/bugs.c
Default Status
unaffected
Versions
Affected
  • From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cb27f3bf915cc0f20fc0c48da9059304e39ebd35 (git)
  • From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9354248fc1c33a844ca1872761f6668b393e8c37 (git)
  • From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1 (git)
  • From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 52440e15d9628f8f239373c0f2e5e8f92feea2df (git)
  • From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a3af84b0fa00ead01fcd0e28b5d773ff25990a0d (git)
  • From 0 before 6.6.145 (semver)
  • From 0 before 6.12.97 (semver)
  • From 0 before 6.18.39 (semver)
  • From 0 before 7.1.4 (semver)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • arch/x86/include/asm/nospec-branch.h
  • arch/x86/kernel/cpu/bugs.c
Default Status
affected
Versions
Unaffected
  • From 6.6.145 through 6.6.* (semver)
  • From 6.12.97 through 6.12.* (semver)
  • From 6.18.39 through 6.18.* (semver)
  • From 7.1.4 through 7.1.* (semver)
  • From 7.2-rc2 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35
N/A
https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37
N/A
https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
N/A
https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df
N/A
https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d
N/A
Hyperlink: https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d
Resource: N/A
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 10:17
Updated At:25 Jul, 2026 | 10:17

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
CPE Matches
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
Hyperlink: https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found