The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfo | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-6.14Upgrade linux-image-awsUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-raspi | Jun 26, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub