CVE-2026-64508

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF JIT allocator where multiple small programs are packed into larger executable allocations and space is reused as programs are loaded and freed. When new code is written into space previously occupied by another program, an indirect jump into the new program may reuse a branch prediction left by the previous one, potentially enabling JIT spraying. To mitigate this, the kernel introduces the bpf arch pred flush enabled static key and the bpf arch pred flush() function to flush indirect branch predictors before JIT memory is reused. JIT spraying is a technique used to bypass security protections by writing a sequence of instructions into executable memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.