CVE-2024-5660 — CRITICAL (9.8)

Vulnerability Description

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Arm	Cortex-A710 Firmware	-
Arm	Cortex-A710	-
Arm	Cortex-A77 Firmware	-
Arm	Cortex-A77	-
Arm	Cortex-A78 Firmware	-
Arm	Cortex-A78	-
Arm	Cortex-A78Ae Firmware	-
Arm	Cortex-A78Ae	-
Arm	Cortex-A78C Firmware	-
Arm	Cortex-A78C	-
Arm	Cortex-X1 Firmware	-
Arm	Cortex-X1	-
Arm	Cortex-X1C Firmware	-
Arm	Cortex-X1C	-
Arm	Cortex-X2 Firmware	-
Arm	Cortex-X2	-
Arm	Cortex-X3 Firmware	-
Arm	Cortex-X3	-
Arm	Cortex-X4 Firmware	-
Arm	Cortex-X4	-

Related Weaknesses (CWE)

CWE-668

References

https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVVendor Advisory

FAQ

What is CVE-2024-5660?

CVE-2024-5660 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4,...

How severe is CVE-2024-5660?

CVE-2024-5660 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-5660?

Check the references section above for vendor advisories and patch information. Affected products include: Arm Cortex-A710 Firmware, Arm Cortex-A710, Arm Cortex-A77 Firmware, Arm Cortex-A77, Arm Cortex-A78 Firmware.