Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade arm-trusted-firmware | Aug 8, 2025 | Dec 10, 2024 |
| Debian | — | Upgrade arm-trusted-firmware | May 15, 2025 | Dec 10, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-docs | Jan 30, 2025 | Dec 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub