CVE-2026-64507 PUBLISHED

x86/bugs: Enable IBPB flush on BPF JIT allocation

Assigner: Linux
Reserved: 19.07.2026 Published: 25.07.2026 Updated: 25.07.2026

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence.

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to cb27f3bf915cc0f20fc0c48da9059304e39ebd35 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 9354248fc1c33a844ca1872761f6668b393e8c37 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 52440e15d9628f8f239373c0f2e5e8f92feea2df (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to a3af84b0fa00ead01fcd0e28b5d773ff25990a0d (excl.)
  • affected from 0 to 6.6.145 (excl.)
  • affected from 0 to 6.12.97 (excl.)
  • affected from 0 to 6.18.39 (excl.)
  • affected from 0 to 7.1.4 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 6.6.145 to 6.6.* (incl.)
  • unaffected from 6.12.97 to 6.12.* (incl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.4 to 7.1.* (incl.)
  • unaffected from 7.2-rc2 to * (incl.)

References