CVE-2024-5660
Fixed in a distro release EPSS <1%CVSS 9.8
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
Products: Arm Cortex-A77, Arm Neoverse V1, Arm Cortex-A78AE, Arm Cortex-78C, Arm Cortex-X1C, Arm Cortex-A78, Arm Cortex-X1, Arm Neoverse N2, Arm Cortex-A710, Arm Cortex-X2, Arm Neoverse V2, Arm Cortex-X3, Arm Neoverse V3AE, Arm Neoverse V3, Arm Cortex-X4, Arm Cortex-X925
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.18 | arm-trusted-firmware | 2.8.32-r0 |
| Alpine 3.19 | arm-trusted-firmware | 2.8.32-r0 |
| Alpine 3.20 | arm-trusted-firmware | 2.8.32-r0 |
| Alpine 3.21 | arm-trusted-firmware | 2.8.32-r0 |
| Debian 12 | arm-trusted-firmware | no fix |
| Debian 13 | arm-trusted-firmware | 2.12.1+dfsg-1 |
| Debian 14 | arm-trusted-firmware | 2.12.1+dfsg-1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | 4.12.14-122.244.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_64 | 1-8.5.1 |
| SUSE Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_8 | 1-150600.1.3.1 |
| SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco | 6.4.0-15061.12.coco15sp6.1 |
| SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco_debug | 6.4.0-15061.12.coco15sp6.1 |
| SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-source-coco | 6.4.0-15061.12.coco15sp6.1 |
| SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-syms-coco | 6.4.0-15061.12.coco15sp6.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-default | 4.12.14-122.244.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source | 4.12.14-122.244.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-syms | 4.12.14-122.244.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-default | 4.12.14-122.244.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source | 4.12.14-122.244.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-syms | 4.12.14-122.244.1 |
| SUSE Linux Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 1-1.1 |
| SUSE Linux Micro 6.0 | kernel-rt | 6.4.0-25.1 |
| SUSE Linux Micro 6.0 | kernel-source-rt | 6.4.0-25.1 |
| SUSE Linux Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 1-1.1 |
| SUSE Linux Micro 6.1 | kernel-rt | 6.4.0-25.1 |
| SUSE Linux Micro 6.1 | kernel-source-rt | 6.4.0-25.1 |
| SUSE Real Time Module 15 SP6 | kernel-rt | 6.4.0-150600.10.26.1 |
| SUSE Real Time Module 15 SP6 | kernel-rt_debug | 6.4.0-150600.10.26.1 |
| SUSE Real Time Module 15 SP6 | kernel-source-rt | 6.4.0-150600.10.26.1 |
| SUSE Real Time Module 15 SP6 | kernel-syms-rt | 6.4.0-150600.10.26.1 |
| Ubuntu 20.04 LTS | arm-trusted-firmware | no fix |
| Ubuntu 22.04 LTS | arm-trusted-firmware | no fix |
| Ubuntu 24.04 LTS | arm-trusted-firmware | no fix |
| Ubuntu 25.10 | arm-trusted-firmware | no fix |
| Ubuntu 26.04 LTS | arm-trusted-firmware | no fix |
| Ubuntu 26.10 | arm-trusted-firmware | no fix |
| openSUSE Leap 15.6 | kernel-rt | 6.4.0-150600.10.26.1 |
| openSUSE Leap 15.6 | kernel-rt_debug | 6.4.0-150600.10.26.1 |
| openSUSE Leap 15.6 | kernel-source-rt | 6.4.0-150600.10.26.1 |
| openSUSE Leap 15.6 | kernel-syms-rt | 6.4.0-150600.10.26.1 |