Red Hat Security Advisory: kernel security update

Fixed packages 91

Vulnerabilities 2

• Unscored —
  CVE-2026-64507 Public exploit

  x86/bugs: Enable IBPB flush on BPF JIT allocation

  In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 25, 2026
• Unscored —
  CVE-2026-64508

  bpf: Support for hardening against JIT spraying

  In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are lo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 25, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2507153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2507218
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91648.json
• report
  https://access.redhat.com/security/cve/CVE-2026-64507
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64507
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64507
• article
  https://lore.kernel.org/linux-cve-announce/2026072554-CVE-2026-64507-5288@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64508
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64508
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64508
• article
  https://lore.kernel.org/linux-cve-announce/2026072554-CVE-2026-64508-fe26@gregkh/T