CVE-2026-64507Patch

HIGH

Exploitation observed; activity peaked at 6 mentions and remains active

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Back to dashboard

7.5/ 10 priority

Sources & remediation

Other references

Priority

HIGH

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
Public PoC and exploit tooling are both present
Patch or workaround signal is available
14 mentions across 6 observed days

What's happening

Active exploitation reported across 1 signal
Exploit tool or code specified in 2 signals
PoC mentioned or linked in 4 signals
Patch or workaround mentioned in 11 signals
Technical details provided in 11 signals
Disclosure: 2 classified signals
Peaked 3d ago at 6 mentions (2026-09-30); latest day: 1
14 total mentions across 6 days

Deep dive

Activity timeline14 mentions / 6d

Signal classification5 categories

Patch

857.1%

Disclosure

214.3%

PoC

214.3%

Active Exploitation

17.1%

False Positive

17.1%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-25	3	Disclosure1Patch2
2026-09-29	1	Patch1
2026-09-30	6	Active Exploitation1Disclosure1Patch4
2026-10-02	2	Patch1PoC1
2026-10-03	1	False Positive1
2026-10-07	1	PoC1

Full discourse14 posts

Es Geeks@EsGeeks25d
Patch
🚨 Nueva variante Spectre v2 (BTR) filtra el hash root de Linux en 3-5 minutos en CPUs Intel. Afecta BPF JIT y más. Parches ya en el kernel. Actualiza ya. CVE-2026-64507 / CVE-2026-64508 #Spectre #Linux #Ciberseguridad https://t.co/f8mc63J8yL
Post summary
The tweet announces a new Spectre v2 (BTR) variant that can leak Linux root hash within minutes on Intel CPUs via BPF JIT, with kernel patches already available, urging immediate updates.
1101331.1K
22.6K followersView on X
OSS開発者@hacker_infra22d
False Positive
CVE-2026-64508 and CVE-2026-64507 これ改めてRed hatに確認したら、カーネルパラメーターでBPFの実行を制限しているから、再現するのはむずかしいみたいだね。 cat /proc/sys/kernel/unprivileged_bpf_disabled 世間で大騒ぎするほどでもない。Ubuntu系も同じかな私の予想通りだったが、念のためベンダー確認をいれておいた https://news.yahoo.co.jp/articles/d8c06abe5cce56e93e9f6b47257d6a05dcb6c60d
Post summary
The text downplays CVE-2026-64508 and CVE-2026-64507, stating that kernel parameter restrictions make reproduction difficult and that the issue is not causing major concern, indicating a false positive or low severity.
03081920
2.9K followersView on X
skeptic 🖖@3kept1c23d
Patch
@elhackernet Hay dos CVE asociados a este nuevo exploit de Spectre: CVE-2026-64507 y CVE-2026-64508. Ambos se corrigieron en el kernel en agosto, con Debian trixie están parcheados desde la 6.12.100-1, acabo de instalar la 6.12.111 ayer.
Post summary
The tweet reports that two Spectre‑related CVEs (CVE-2026-64507 and CVE-2026-64508) were patched in the kernel in August, noting that Debian trixie includes the fix from version 6.12.100-1 and that the author installed version 6.12.111.
01030187
516 followersView on X
Orion84@Orion84x25d
Patch
Spectre is back, and it is practical. Branch Target Reuse (CVE-2026-64507/CVE-2026-64508) leaked a Linux root password hash in 3-5 minutes on recent Intel CPUs via cBPF. Local only, not remote. Kernel fixes are already merged. Patch shared Linux hosts Link https://www.bleepingcomputer.com/news/security/new-spectre-v2-attack-variant-leaks-linux-root-password-hash-in-minutes/
Post summary
The post announces a new Spectre variant (CVE-2026-64507/CVE-2026-64508) that can leak Linux root password hashes locally via cBPF on recent Intel CPUs, and notes that kernel fixes have already been merged, urging users to patch shared Linux hosts.
1002074
22 followersView on X
Frontiera Tech@FrontieraTechIT25d
Active Exploitation
🛡️ CYBER BULLETIN | 2026/09/30 🚨 1) NetScaler CVE-2026-88772 now dropping WHIPSHOT Mandiant and GTIG say attackers are using the DTLS overflow for unauthenticated root on ADC/Gateway boxes in North America and Europe. After the crash they install PHP webshells (WHIPSHOT) and the SLAPSHOT Python tunnel to walk internal networks. GreyNoise says mass exploitation kicked in after 28 Sep. 2) OpenSSL patches DTLS heap leak CVE-2026-84782 A High-severity bug can dump unencrypted heap to the peer or crash the process when a DTLS handshake resent overlaps a larger in-flight message. Fixed in 4.0.3, 3.6.5, 3.5.9 and 3.4.8. Hits WebRTC and other UDP TLS paths. No workaround. 3) Apple CoreGraphics zero-day CVE-2026-86950 is in CISA KEV Out-of-bounds write found by Meta Product Security. Apple says it was used in “extremely sophisticated” targeted attacks on iOS before iOS 27. Patches: iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1, Sequoia 15.8.1. CISA added it to KEV on 29 Sep. 4) DIVD hit by a sloppy agentic attacker The Dutch Institute for Vulnerability Disclosure says an automated AI agent exploited a non-NetScaler bug, then ran post-exploitation itself — loud, fast, and error-prone (it even collided with its own password-spray AitM). Police, AP and NCSC notified. Full IOCs held back for the investigation. 5) Spectre v2 BTR leaks Linux root hashes VUSec and Scuola Superiore Sant’Anna showed Branch Target Reuse: stale JIT branch-predictor entries survive self-modifying code. PoCs against Linux cBPF JIT recovered the root password hash in minutes on patched Intel boxes. Kernel fixes: CVE-2026-64507 and CVE-2026-64508. Firefox, GraalVM also in scope. #Cybersecurity #CISA #NIST
Post summary
Multiple CVEs (NetScaler CVE-2026-88772, Apple CVE-2026-86950, Spectre BTR) are reported as actively exploited in the wild with CISA KEV listing and attack toolchains like WHIPSHOT. Patches are confirmed for OpenSSL and Apple products, and exploit PoCs/tools are named.
10010230
100 followersView on X
BT Haberler@BTHaberler18d
PoC
Yeni "BTR" Saldırısı, Tamamen Yamalı Intel Sistemlerden Dakikalar İçinde Root Şifre Karmasını Sızdırabiliyor! Araştırmacılar, JIT (just-in-time) derleyici motorlarını hedef alan yeni bir Spectre v2 varyantı olan "Branch Target Reuse" (BTR) saldırısını duyurdu; CVE-2026-64507 ve CVE-2026-64508 olarak kayıtlı açık, "eski" (stale) dal tahmini kayıtlarının kod önbelleği yeniden doldurulduğunda tekrar kullanılabilmesinden yararlanarak SpiderMonkey (Firefox), GraalVM ve Linux çekirdeğinin cBPF JIT'i gibi sistemlerden bellek sızdırıyor. • Araştırmacılar, tamamen güncel ve yamalı Intel sistemlerden dakikalar içinde root parola karmasını (hash) sızdırabilen çalışan bir kanıt niteliğinde istismar kodu (PoC) geliştirdiler; saldırı mevcut Spectre v2 savunmalarını atlatıyor. • Sorun, modern CPU'ların kod değiştirildiğinde tüm mikromimari durumu senkronize etmemesinden kaynaklanıyor; bu da "zamansal" (temporal) boyutta yeni bir Spectre saldırı sınıfı ortaya koyuyor. Yıllardır üzerinde çalışılan Spectre savunmalarının bile, donanımın "eski" tahmin verilerini temizlemeyi unuttuğu bir zaman boşluğuyla atlatılabilmesi, işlemci seviyesindeki yan kanal risklerinin yazılım yamalarıyla asla tam olarak kapatılamayabileceğini gösteriyor. #SiberGüvenlik #Spectre #CPU
Post summary
The text discloses a new Spectre v2 variant called BTR and reports researchers developed working PoC exploit code targeting JIT engines, without reporting active exploitation or a named patch.
0001071
44 followersView on X
Diario฿itcoin@DiarioBitcoin24d
Disclosure
⚠️ Nueva variante de Spectre puede filtrar el hash de root Branch Target Reuse explota código JIT y objetivos obsoletos del predictor de saltos. Investigadores reportaron hasta 5,7 KB/s en pruebas con Linux e Intel. Linux y Oracle aplicaron mitigaciones. CVE-2026-64507 y CVE-2026-64508.
Post summary
The text announces a new Spectre variant capable of leaking root hashes, provides technical details about the vulnerability (Branch Target Reuse), and notes that Linux and Oracle have applied mitigations. While patches are mentioned, the primary focus is on disclosing the vulnerability and its technical aspects.
10000521
213.4K followersView on X
DFIR Radar@DFIR_Radar25d
Patch
BTR, a new Spectre-v2 variant, exploits stale branch prediction entries in JIT engines across Linux cBPF, GraalVM, and Firefox's SpiderMonkey. Patch Linux for CVE-2026-64507 and CVE-2026-64508. #DFIR_Radar https://t.co/ZwHUyaHnyf
Post summary
The text discloses a new Spectre-v2 variant (BTR) and explicitly instructs users to 'Patch Linux for CVE-2026-64507 and CVE-2026-64508,' making the patch advisory the primary takeaway.
10000189
2.0K followersView on X
Infoflowcloud@infoflowcloud91d
Patch
🚨*CVE* CVE-2026-64507 In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spe… https://www.cve.org/CVERecord?id=CVE-2026-64507 ----- Traducción: CVE-2026-64507 En … http://infoflow.cloud`
Post summary
The text announces that CVE-2026-64507 in the Linux kernel has been fixed with a hardening change, providing a patch-related update.
0000123
95 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-64507 In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spe… https://www.cve.org/CVERecord?id=CVE-2026-64507
Post summary
The text indicates that CVE-2026-64507 has been resolved in the Linux kernel, but offers no detailed technical or exploitation information.
000101.1K
57.9K followersView on X
N A I F@naif_aiydh23d
PoC
هجوم BTR الجديد (من عائلة Spectre v2) استخرج Hash كلمة مرور root على Linux خلال 3–5 دقائق في المتوسط 🐧 يستغل توقعات قديمة في المعالج بعد أن يعيد محرك JIT استخدام نفس الذاكرة. الثغرتان: CVE-2026-64507 وCVE-2026-64508، والإصلاح دُمج في نواة Linux. https://www.bleepingcomputer.com/news/security/new-spectre-v2-attack-variant-leaks-linux-root-password-hash-in-minutes/
Post summary
The tweet announces a new Spectre‑v2‑derived BTR attack that can extract the Linux root password hash in minutes, cites two CVEs, and notes that the fix has been merged into the kernel, with a link to a detailed article.
00000251
7.2K followersView on X
Badger Signal@BadgerSignalHQ25d
Patch
🔬 New Spectre-v2 Variant (BTR) Leverages JIT Engines to Leak Linux Memory Security researchers have disclosed Branch Target Reuse (BTR)—a new Spectre-v2 vulnerability (CVE-2026-64507 & CVE-2026-64508) that demonstrates speculative execution side-channel attacks are far from solved. Here is what infrastructure, kernel, and threat intel teams need to keep on their radar: 🔹 The Mechanism: BTR exploits a fundamental gap in modern CPUs (Intel, AMD, Arm). When Just-In-Time (JIT) engines allocate, free, and reuse memory regions, the CPU’s Branch Target Buffer (BTB) retains stale indirect branch prediction entries. 🔹 The Attack Vector: An unprivileged attacker can manipulate this stale data to create a "speculative execute-after-free" primitive, bypassing existing hardware and software mitigations (including FineIBT and constant blinding). 🔹 Real-World Impact: Researchers demonstrated end-to-end exploits against the Linux kernel's cBPF JIT, successfully leaking root password hashes from memory in minutes. Runtime engines like Firefox’s SpiderMonkey and Oracle’s GraalVM are also affected. Mitigation Steps: Update Linux kernels immediately to apply merged patches addressing CVE-2026-64507 / CVE-2026-64508. Ensure browser and runtime environments are patched as vendor updates roll out. Read our complete technical breakdown at Badger Signal: 👇 https://badgersignal.com/articles/new-spectrev2-variant-branch-target-reuse-btr-exploits-jit-engines-and-linux-kernel #Cybersecurity #Linux #HardwareSecurity #VulnerabilityManagement #ThreatIntelligence #InfoSec #Spectre #AppSec
Post summary
Security researchers disclosed a new Spectre-v2 variant (BTR, CVE-2026-64507/64508) leveraging JIT engine memory reuse, demonstrated end-to-end exploits against Linux kernel cBPF JIT, and urged immediate patching of Linux kernels and runtime environments.
0000061
8 followersView on X
Cybersecurity News Everyday@TweetThreatNews25d
Patch
New Spectre v2 variant BTR can leak Linux root password hashes in minutes by abusing stale branch predictor state. Impacts cBPF, Firefox SpiderMonkey, and GraalVM; kernel fixes are merged for CVE-2026-64507 and CVE-2026-64508. #Linux #Spectre #VUSec https://www.hendryadrian.com/new-spectre-v2-attack-variant-leaks-linux-root-password-hash-in-minutes/
Post summary
A newly discovered Spectre v2 variant (BTR) can leak Linux root password hashes in minutes by abusing stale branch predictor state, affecting cBPF, Firefox SpiderMonkey, and GraalVM; kernel fixes have been merged for CVE‑2026‑64507 and CVE‑2026‑64508.
00000237
4.9K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds92d
Patch
CVE-2026-64507 In the Linux kernel, the following vulnerability has been resolved: x86/bugs https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64507
Post summary
The post confirms that CVE-2026-64507 has been resolved in the Linux kernel and provides a link to further details, indicating a patch has been released.
0000090
4.1K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-64507

OSS開発者[verified]@hacker_infraFalse Positive

The text downplays CVE-2026-64508 and CVE-2026-64507, stating that kernel parameter restrictions make reproduction difficult and that the issue is not causing major concern, indicating a false positive or low severity.

Frontiera Tech[verified]@FrontieraTechITActive Exploitation

Multiple CVEs (NetScaler CVE-2026-88772, Apple CVE-2026-86950, Spectre BTR) are reported as actively exploited in the wild with CISA KEV listing and attack toolchains like WHIPSHOT. Patches are confirmed for OpenSSL and Apple products, and exploit PoCs/tools are named.

BT Haberler[verified]@BTHaberlerPoC

The text discloses a new Spectre v2 variant called BTR and reports researchers developed working PoC exploit code targeting JIT engines, without reporting active exploitation or a named patch.

Diario฿itcoin[verified]@DiarioBitcoinDisclosure

The text announces a new Spectre variant capable of leaking root hashes, provides technical details about the vulnerability (Branch Target Reuse), and notes that Linux and Oracle have applied mitigations. While patches are mentioned, the primary focus is on disclosing the vulnerability and its technical aspects.

DFIR Radar[verified]@DFIR_RadarPatch

The text discloses a new Spectre-v2 variant (BTR) and explicitly instructs users to 'Patch Linux for CVE-2026-64507 and CVE-2026-64508,' making the patch advisory the primary takeaway.

N A I F[verified]@naif_aiydhPoC

The tweet announces a new Spectre‑v2‑derived BTR attack that can extract the Linux root password hash in minutes, cites two CVEs, and notes that the fix has been merged into the kernel, with a link to a detailed article.

Badger Signal[verified]@BadgerSignalHQPatch

Security researchers disclosed a new Spectre-v2 variant (BTR, CVE-2026-64507/64508) leveraging JIT engine memory reuse, demonstrated end-to-end exploits against Linux kernel cBPF JIT, and urged immediate patching of Linux kernels and runtime environments.

Cybersecurity News Everyday[verified]@TweetThreatNewsPatch

A newly discovered Spectre v2 variant (BTR) can leak Linux root password hashes in minutes by abusing stale branch predictor state, affecting cBPF, Firefox SpiderMonkey, and GraalVM; kernel fixes have been merged for CVE‑2026‑64507 and CVE‑2026‑64508.