Not yet scoredPublished Jul 25, 2026

CVE-2026-64507x86/bugs: Enable IBPB flush on BPF JIT allocation

Updated under an hour ago (Oct 27, 2026, 9:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	57631054fae6dcc9c892ae6310b58bbb6f6e5048 builds before 25dbcd31781e2bc3cd63d873af1fcd06f863a126; from 57631054fae6dcc9c892ae6310b58bbb6f6e5048 before cb27f3bf915cc0f20fc0c48da9059304e39ebd35; 57631054fae6dcc9c892ae6310b58bbb6f6e5048 builds before 9354248fc1c33a844ca1872761f6668b393e8c37; 57631054fae6dcc9c892ae6310b58bbb6f6e5048 builds before 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1; 57631054fae6dcc9c892ae6310b58bbb6f6e5048 builds before 52440e15d9628f8f239373c0f2e5e8f92feea2df; from 57631054fae6dcc9c892ae6310b58bbb6f6e5048 before a3af84b0fa00ead01fcd0e28b5d773ff25990a0d	CNA record

References

References

https://git.kernel.org/stable/c/25dbcd31781e2bc3cd63d873af1fcd06f863a126
https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35
https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37
https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df
https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.