Linux Kernel Vulnerability Affecting BPF JIT Allocation
CVE-2026-64507
Key Information:
Badges
What is CVE-2026-64507?
A vulnerability in the Linux kernel has been identified which affects the BPF Just-In-Time (JIT) allocation. The issue involves a potential exploitation vector related to JIT spraying while mitigating the Spectre version 2 attack. To enhance security, the introduction of an Indirect Branch Predictors Barrier (IBPB) flush on BPF JIT memory reuse has been implemented. This hardening mechanism is conditionally activated based on the usage of BPF JIT, ensuring that even when this feature is not employed, the integrity of the kernel code remains intact. Proper configuration is necessary to enable these protective measures.
Affected Version(s)
Linux 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 25dbcd31781e2bc3cd63d873af1fcd06f863a126
Linux 57631054fae6dcc9c892ae6310b58bbb6f6e5048
Linux 57631054fae6dcc9c892ae6310b58bbb6f6e5048 < 9354248fc1c33a844ca1872761f6668b393e8c37
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.