Vulnerability Description
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xen | Xen | - |
| Arm | Cortex-A57 | - |
| Arm | Cortex-A65 | - |
| Arm | Cortex-A65Ae | - |
| Arm | Cortex-A710 | - |
| Arm | Cortex-A72 | - |
| Arm | Cortex-A73 | - |
| Arm | Cortex-A75 | - |
| Arm | Cortex-A76 | - |
| Arm | Cortex-A76Ae | - |
| Arm | Cortex-A77 | - |
| Arm | Cortex-A78 | - |
| Arm | Cortex-A78Ae | - |
| Arm | Cortex-R7 | - |
| Arm | Cortex-R8 | - |
| Arm | Cortex-X1 | - |
| Arm | Cortex-X2 | - |
| Arm | Neoverse-E1 | - |
| Arm | Neoverse-V1 | - |
| Arm | Neoverse N1 | - |
References
- http://www.openwall.com/lists/oss-security/2022/03/18/2Mailing ListPatchThird Party Advisory
- https://developer.arm.com/support/arm-security-updatesVendor Advisory
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulMitigationPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing ListThird Party Advisory
- https://www.debian.org/security/2022/dsa-5173Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/18/2Mailing ListPatchThird Party Advisory
- https://developer.arm.com/support/arm-security-updatesVendor Advisory
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulMitigationPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing ListThird Party Advisory
- https://www.debian.org/security/2022/dsa-5173Third Party Advisory
FAQ
What is CVE-2022-23960?
CVE-2022-23960 is a vulnerability with a CVSS score of 5.6 (MEDIUM). Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buff...
How severe is CVE-2022-23960?
CVE-2022-23960 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-23960?
Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen, Arm Cortex-A57, Arm Cortex-A65, Arm Cortex-A65Ae, Arm Cortex-A710.