CVE-2026-64507: x86/bugs: Enable IBPB flush on BPF JIT allocation

1. In CISA KEV: not seen
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public1 public GitHub repository (unverified), listed by PoC-in-GitHub15 Oct
5. Not established: not seen

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Exploitation

Unlikely (under 1%). EPSS under 1%, or no score yet.

CISA KEV

Not listed

Public check

No public nuclei template

Vendor

Linux

Published

July 2026

Band

Unlikely (under 1%), July 2026

1. 15 Oct
   PoC-in-GitHub lists 1 public GitHub repository (unverified) PoC-in-GitHub

• NVD entrynvd.nist.gov
• Vendor advisorygit.kernel.org
• CVE recordcve.org