Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extra | Nov 14, 2022 | Mar 13, 2022 |
| Alpine Linux | — | Upgrade xen | Oct 1, 2024 | Mar 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Jul 4, 2022 | Mar 13, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 8, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf | Feb 17, 2025 | Mar 8, 2022 |
| Centos_linux | — | Upgrade kernel | Nov 9, 2022 | Mar 13, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Aug 2, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel | Jun 22, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 11, 2022 | Mar 13, 2022 |
| Msft | — | 2022-09 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5017328) | Sep 13, 2022 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 24, 2022 | Mar 8, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Nov 9, 2022 | Mar 13, 2022 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade perf | Mar 12, 2024 | Mar 13, 2022 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade arm-trusted-firmware-rpi3Upgrade arm-trusted-firmware-toolsUpgrade arm-trusted-firmware-tegra210Upgrade arm-trusted-firmware-poplarUpgrade kernel-64kb-develUpgrade arm-trusted-firmware-rk3328Upgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade arm-trusted-firmware-zynqmpUpgrade arm-trusted-firmware-qemu_sbsaUpgrade kernel-source-azureUpgrade arm-trusted-firmware-sun50i_h6Upgrade arm-trusted-firmware-sun50i_a64Upgrade arm-trusted-firmwareUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade arm-trusted-firmware-rk3368Upgrade arm-trusted-firmware-imx8mqUpgrade kernel-obs-buildUpgrade arm-trusted-firmware-tegra186Upgrade kernel-default-manUpgrade arm-trusted-firmware-imx8mmUpgrade kernel-default-baseUpgrade kernel-docsUpgrade arm-trusted-firmware-qemuUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade arm-trusted-firmware-rpi4Upgrade kernel-default | Oct 26, 2022 | Mar 13, 2022 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1072-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-raspiUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-5.4.0-1036-gkeopUpgrade linux-image-5.4.0-1055-raspiUpgrade linux-image-5.4.0-104-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-104-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-1017-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-1017-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1030-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1017-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-35-genericUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-raspi2Upgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1058-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-104-lowlatencyUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1072-azureUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1065-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.4.0-1066-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1068-awsUpgrade linux-image-5.4.0-1067-gcpUpgrade linux-image-5.13.0-1019-gcp | Mar 9, 2022 | Mar 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub