{"id":"CVE-2026-64507","title":"x86/bugs: Enable IBPB flush on BPF JIT allocation","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/bugs: Enable IBPB flush on BPF JIT allocation\n\nEnable hardening against JIT spraying when Spectre-v2 mitigations are in\nuse. Specifically, issue an IBPB flush on BP…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 25dbcd31781e2bc3cd63d873af1fcd06f863a126","Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < cb27f3bf915cc0f20fc0c48da9059304e39ebd35","Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 9354248fc1c33a844ca1872761f6668b393e8c37","Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1","Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 52440e15d9628f8f239373c0f2e5e8f92feea2df","Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < a3af84b0fa00ead01fcd0e28b5d773ff25990a0d","Linux 5.18"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:40:39.454506Z"},"exploitAvailable":true,"published":"2026-07-25","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:44:55.807Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64507","references":[{"url":"https://git.kernel.org/stable/c/25dbcd31781e2bc3cd63d873af1fcd06f863a126"},{"url":"https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35"},{"url":"https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37"},{"url":"https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1"},{"url":"https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df"},{"url":"https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d"}],"tags":["cve.org","exploit-available"],"epss":0.00231,"epssPercentile":0.14023,"exploits":{"github":1,"githubRepos":["https://github.com/manalejandro/CVE-2026-64507"],"checkedAt":"2026-11-08T19:28:28.558Z"},"ingestedAt":"2026-11-06T16:57:43.158Z","slug":"CVE-2026-64507","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nx86/bugs: Enable IBPB flush on BPF JIT allocation\n\nEnable hardening against JIT spraying when Spectre-v2 mitigations are in\nuse. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip\nenabling the IBPB flush if the BPF dispatcher is already using a retpoline\nsequence.\n\nThis hardening applies only when BPF-JIT is in use. Guard the enabling\nunder CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.\n\n## Affected\n\n- `Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 25dbcd31781e2bc3cd63d873af1fcd06f863a126`\n- `Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < cb27f3bf915cc0f20fc0c48da9059304e39ebd35`\n- `Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 9354248fc1c33a844ca1872761f6668b393e8c37`\n- `Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1`\n- `Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 52440e15d9628f8f239373c0f2e5e8f92feea2df`\n- `Linux >= 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < a3af84b0fa00ead01fcd0e28b5d773ff25990a0d`\n- `Linux 5.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[]}