Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade arm-trusted-firmware | Aug 8, 2025 | Dec 10, 2024 |
| Debian | — | Upgrade arm-trusted-firmware | May 15, 2025 | Dec 10, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-devel | Jan 30, 2025 | Dec 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub