CVE-2022-23960

Fixed in a distro release EPSS <1%

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

Published 2022-03-12 · CVE record · OSV

Products: xen, arm cortex-r7_firmware, arm cortex-r8_firmware, arm cortex-a57_firmware, arm cortex-a65_firmware, arm cortex-a65ae_firmware, arm cortex-a710_firmware, arm cortex-a72_firmware, arm cortex-a73_firmware, arm cortex-a75_firmware, arm cortex-a76_firmware, arm cortex-a76ae_firmware, arm cortex-a77_firmware, arm cortex-a78_firmware, arm cortex-a78ae_firmware, arm cortex-x1_firmware, arm cortex-x2_firmware, arm neoverse-e1_firmware, arm neoverse-v1_firmware, arm neoverse_n1_firmware, arm neoverse_n2_firmware, debian_linux

Distro releases