{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T13:02:15.053","vulnerabilities":[{"cve":{"id":"CVE-2026-64507","sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","published":"2026-07-25T10:17:36.810","lastModified":"2026-08-19T17:20:15.123","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/bugs: Enable IBPB flush on BPF JIT allocation\n\nEnable hardening against JIT spraying when Spectre-v2 mitigations are in\nuse. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip\nenabling the IBPB flush if the BPF dispatcher is already using a retpoline\nsequence.\n\nThis hardening applies only when BPF-JIT is in use. Guard the enabling\nunder CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n."}],"affected":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","affectedData":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["arch/x86/include/asm/nospec-branch.h","arch/x86/kernel/cpu/bugs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"57631054fae6dcc9c892ae6310b58bbb6f6e5048","lessThan":"25dbcd31781e2bc3cd63d873af1fcd06f863a126","versionType":"git","status":"affected"},{"version":"57631054fae6dcc9c892ae6310b58bbb6f6e5048","lessThan":"cb27f3bf915cc0f20fc0c48da9059304e39ebd35","versionType":"git","status":"affected"},{"version":"57631054fae6dcc9c892ae6310b58bbb6f6e5048","lessThan":"9354248fc1c33a844ca1872761f6668b393e8c37","versionType":"git","status":"affected"},{"version":"57631054fae6dcc9c892ae6310b58bbb6f6e5048","lessThan":"8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1","versionType":"git","status":"affected"},{"version":"57631054fae6dcc9c892ae6310b58bbb6f6e5048","lessThan":"52440e15d9628f8f239373c0f2e5e8f92feea2df","versionType":"git","status":"affected"},{"version":"57631054fae6dcc9c892ae6310b58bbb6f6e5048","lessThan":"a3af84b0fa00ead01fcd0e28b5d773ff25990a0d","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["arch/x86/include/asm/nospec-branch.h","arch/x86/kernel/cpu/bugs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.18","status":"affected"},{"version":"0","lessThan":"5.18","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.97","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.39","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.4","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]}],"metrics":{},"references":[{"url":"https://git.kernel.org/stable/c/25dbcd31781e2bc3cd63d873af1fcd06f863a126","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}]}}]}