Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries

VUSec disclosed Branch Target Reuse, a practical Spectre-v2 attack on JIT engines via stale branch-prediction entries.

VUSec announced Branch Target Reuse (BTR), a Spectre-v2 technique that uses stale branch-prediction entries to attack JIT engines. The disclosure points to a CCS 2026 paper, a project page, and a public GitHub repository. The oss-security note mentions mitigations but does not assign a CVE or report exploitation observed in the wild.

• VUSec published Branch Target Reuse, a Spectre-v2 technique against JIT engines.
• Attacks reuse stale branch-prediction entries rather than injecting new ones.
• A CCS 2026 paper, project page, and GitHub repository were released.
• The post references mitigations but names no CVE or in-the-wild exploitation.