-

CVE-2026-64507

x86/bugs: Enable IBPB flush on BPF JIT allocation

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

Enable hardening against JIT spraying when Spectre-v2 mitigations are in
use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip
enabling the IBPB flush if the BPF dispatcher is already using a retpoline
sequence.

This hardening applies only when BPF-JIT is in use. Guard the enabling
under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Version < 25dbcd31781e2bc3cd63d873af1fcd06f863a126
Status affected
Version 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Version < cb27f3bf915cc0f20fc0c48da9059304e39ebd35
Status affected
Version 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Version < 9354248fc1c33a844ca1872761f6668b393e8c37
Status affected
Version 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Version < 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
Status affected
Version 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Version < 52440e15d9628f8f239373c0f2e5e8f92feea2df
Status affected
Version 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Version < a3af84b0fa00ead01fcd0e28b5d773ff25990a0d
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.18
Status affected
Version 0
Version < 5.18
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35
https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37
https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1
https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df
https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d
https://git.kernel.org/stable/c/25dbcd31781e2bc3cd63d873af1fcd06f863a126