Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-tools | Nov 14, 2022 | Mar 13, 2022 |
| Alpine Linux | — | Upgrade xen | Oct 1, 2024 | Mar 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-livepatch-4.14.268-205.500Upgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-tools-devel | Jul 4, 2022 | Mar 13, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 8, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Feb 17, 2025 | Mar 8, 2022 |
| Centos_linux | — | Upgrade kernel | Nov 9, 2022 | Mar 13, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Aug 2, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs | Jun 22, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 11, 2022 | Mar 13, 2022 |
| Msft | — | 2022-09 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5017328) | Sep 13, 2022 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 24, 2022 | Mar 8, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Nov 9, 2022 | Mar 13, 2022 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-cross-headersUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-modules-extra | Mar 12, 2024 | Mar 13, 2022 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade arm-trusted-firmware-sun50i_a64Upgrade kernel-sourceUpgrade arm-trusted-firmware-qemu_sbsaUpgrade arm-trusted-firmware-sun50i_h6Upgrade kernel-develUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade arm-trusted-firmware-zynqmpUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade arm-trusted-firmware-rpi3Upgrade arm-trusted-firmware-tegra210Upgrade arm-trusted-firmware-rk3328Upgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade arm-trusted-firmware-toolsUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade arm-trusted-firmware-poplarUpgrade kernel-azure-develUpgrade arm-trusted-firmwareUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-defaultUpgrade arm-trusted-firmware-rpi4Upgrade kernel-obs-buildUpgrade arm-trusted-firmware-rk3368Upgrade arm-trusted-firmware-imx8mqUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade arm-trusted-firmware-qemuUpgrade kernel-azureUpgrade kernel-default-baseUpgrade arm-trusted-firmware-tegra186Upgrade arm-trusted-firmware-imx8mm | Oct 26, 2022 | Mar 13, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1030-bluefieldUpgrade linux-image-5.4.0-104-genericUpgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1017-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-104-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1017-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1055-raspiUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-5.4.0-1072-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-5.4.0-1036-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1066-oracleUpgrade linux-image-awsUpgrade linux-image-5.4.0-1072-azureUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.14.0-1027-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-5.4.0-1067-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1058-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-5.4.0-104-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.4.0-1068-awsUpgrade linux-image-5.4.0-1065-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04 | Mar 9, 2022 | Mar 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub