What is CVE-2026-64507?

CVE-2026-64507 is a unscored severity Linux kernel vulnerability. CVE-2026-64507 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64507?

CVE-2026-64507 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-64507?

Yes, CVE-2026-64507 has been patched. Fixed versions include 6.6.145, 6.12.97, 6.18.39 and others.

Is CVE-2026-64507 actively exploited?

CVE-2026-64507 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Package Linux Kernel

Published 2026-07-25

Last modified 2026-07-25

Patch available

Yes

Affected versions

Fixed in 6.6.145, 6.12.97, 6.18.39, 7.1.4, 7.2-rc2 and their respective stable series.

Fixed in

✓ 6.6.145 6.6.x ✓ 6.12.97 6.12.x ✓ 6.18.39 6.18.x ✓ 7.1.4 7.1.x ✓ 7.2-rc2

References

5 total

Frequently asked questions

What is CVE-2026-64507?

CVE-2026-64507 is a unscored severity Linux kernel vulnerability . CVE-2026-64507 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-64507?

Yes. CVE-2026-64507 has been patched. Fixed versions include 6.6.145, 6.12.97, 6.18.39 and others.
Is CVE-2026-64507 actively exploited?

No. CVE-2026-64507 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.