SB2026072757 - Protection mechanism failure in Linux kernel bpf

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026072757

SB2026072757 - Protection mechanism failure in Linux kernel bpf

Published: July 27, 2026

Security Bulletin ID SB2026072757
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Protection mechanism failure (CVE-ID: CVE-2026-64508)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to bypass branch prediction isolation for reused BPF JIT memory.

The vulnerability exists due to improper isolation of indirect branch predictor state in the BPF JIT allocator when reusing JIT memory for newly written programs. A remote attacker can load and free BPF programs to bypass branch prediction isolation for reused BPF JIT memory.

Allocations larger than a pack are not covered by this condition, and the described attack surface is limited to cBPF programs that fit within pack size constraints.


Remediation

Install update from vendor's website.

References