Three Linux stable kernel updates, versions 6.18.43, 6.6.149, and 6.1.181, have been released to patch a new Spectre v2 vulnerability known as "Interrupt Injection" (CVE-2026-68480), discovered by MIT researchers. This flaw allows unprivileged users to leak kernel memory by exploiting a timing window during AMD's Safe RET mechanism, which is intended to protect against Spectre v2 attacks. AMD has acknowledged the vulnerability and issued a bulletin confirming the kernel patch, while Intel has stated that current mitigations are sufficient, although researchers indicate that potential exploitation on Intel systems is still possible. Users, particularly those on AMD systems, are urged to apply the patches and check their mitigation status to ensure protection against the vulnerability
Linux Kernel 6.18.43, 6.6.149, and 6.1.181 Patches New Spectre v2 Interrupt Injection Flaw
Greg Kroah-Hartman just shipped three Linux stable kernels, 6.18.43, 6.6.149, and 6.1.181, each patched against CVE-2026-68480. The update neutralizes a novel Spectre v2 bypass called "Interrupt Injection," which lets unprivileged users leak kernel memory by timing hardware interrupts inside AMD's Safe RET window. MIT researchers demonstrated reliable kernel reads on Zen 2, though Intel maintains existing mitigations remain sufficient. Apply the update today and verify protection status through the spec_rstack_overflow sysfs entry.
