Reported by 2 outlets
Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
Branch Target Reuse (BTR) targets stale JIT branch predictions to leak memory on Intel, AMD, and Arm systems. Researchers from VUSec and Scuola Superiore Sant'Anna disclosed CVE-2026-64507 and CVE-2026-64508, which cover the kernel-level flaws. A new event (low-trust aggregator repost, no named primary source in text) attaches to the canonical BTR story without minting a separate story. The event mentions 9 detections and 15 IOCs but has no provenance verification, so it amplifies the existing story only.
The original disclosure covers Linux kernel fixes, Firefox SpiderMonkey exposure, and GraalVM analysis. The low-trust repost does not change the technical facts or add new CVEs, vendors, or victim counts. It remains a secondary aggregator signal rather than primary reporting.
Keep tracking Linux kernel patch rollout and browser-engine updates. No new exploitation claims have been verified at primary sources since the initial VUSec disclosure.
Timeline
-
original reporting
Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries
vusec.net · 14d ago · September 30th, 2026
submitted by /u/anh0516 [link] [comments]
via reddit r/cybersecurity: Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries
-
mentioned by www.vusec.net
RT: @0xor0ne Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries https://www. vusec.net/projects/btr/ # infosec
www.vusec.net · 4d ago · October 9th, 2026