In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade kernel-livepatch-6.12.29-33.102 | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade gfs2-kmp-default | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub