Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-5660

Fixed in a distro release EPSS <1%CVSS 9.8

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.

Published 2024-12-10 · CVE record · OSV

Products: Arm Cortex-A77, Arm Neoverse V1, Arm Cortex-A78AE, Arm Cortex-78C, Arm Cortex-X1C, Arm Cortex-A78, Arm Cortex-X1, Arm Neoverse N2, Arm Cortex-A710, Arm Cortex-X2, Arm Neoverse V2, Arm Cortex-X3, Arm Neoverse V3AE, Arm Neoverse V3, Arm Cortex-X4, Arm Cortex-X925

Distro releases

ReleasePackageFixed in
Alpine 3.18arm-trusted-firmware2.8.32-r0
Alpine 3.19arm-trusted-firmware2.8.32-r0
Alpine 3.20arm-trusted-firmware2.8.32-r0
Alpine 3.21arm-trusted-firmware2.8.32-r0
Debian 12arm-trusted-firmwareno fix
Debian 13arm-trusted-firmware2.12.1+dfsg-1
Debian 14arm-trusted-firmware2.12.1+dfsg-1
SUSE Linux Enterprise Live Patching 12 SP5kernel-default4.12.14-122.244.1
SUSE Linux Enterprise Live Patching 12 SP5kgraft-patch-SLE12-SP5_Update_641-8.5.1
SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-SLE15-SP6-RT_Update_81-150600.1.3.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-coco6.4.0-15061.12.coco15sp6.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-coco_debug6.4.0-15061.12.coco15sp6.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-source-coco6.4.0-15061.12.coco15sp6.1
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6kernel-syms-coco6.4.0-15061.12.coco15sp6.1
SUSE Linux Enterprise Server 12 SP5-LTSSkernel-default4.12.14-122.244.1
SUSE Linux Enterprise Server 12 SP5-LTSSkernel-source4.12.14-122.244.1
SUSE Linux Enterprise Server 12 SP5-LTSSkernel-syms4.12.14-122.244.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5kernel-default4.12.14-122.244.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5kernel-source4.12.14-122.244.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5kernel-syms4.12.14-122.244.1
SUSE Linux Micro 6.0kernel-livepatch-MICRO-6-0-RT_Update_51-1.1
SUSE Linux Micro 6.0kernel-rt6.4.0-25.1
SUSE Linux Micro 6.0kernel-source-rt6.4.0-25.1
SUSE Linux Micro 6.1kernel-livepatch-MICRO-6-0-RT_Update_51-1.1
SUSE Linux Micro 6.1kernel-rt6.4.0-25.1
SUSE Linux Micro 6.1kernel-source-rt6.4.0-25.1
SUSE Real Time Module 15 SP6kernel-rt6.4.0-150600.10.26.1
SUSE Real Time Module 15 SP6kernel-rt_debug6.4.0-150600.10.26.1
SUSE Real Time Module 15 SP6kernel-source-rt6.4.0-150600.10.26.1
SUSE Real Time Module 15 SP6kernel-syms-rt6.4.0-150600.10.26.1
Ubuntu 20.04 LTSarm-trusted-firmwareno fix
Ubuntu 22.04 LTSarm-trusted-firmwareno fix
Ubuntu 24.04 LTSarm-trusted-firmwareno fix
Ubuntu 25.10arm-trusted-firmwareno fix
Ubuntu 26.04 LTSarm-trusted-firmwareno fix
Ubuntu 26.10arm-trusted-firmwareno fix
openSUSE Leap 15.6kernel-rt6.4.0-150600.10.26.1
openSUSE Leap 15.6kernel-rt_debug6.4.0-150600.10.26.1
openSUSE Leap 15.6kernel-source-rt6.4.0-150600.10.26.1
openSUSE Leap 15.6kernel-syms-rt6.4.0-150600.10.26.1