Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules | Nov 14, 2022 | Mar 13, 2022 |
| Alpine Linux | — | Upgrade xen | Oct 1, 2024 | Mar 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.106-102.504Upgrade bpftoolUpgrade perfUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perfUpgrade kernel-tools | Jul 4, 2022 | Mar 13, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 8, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42 | Feb 17, 2025 | Mar 8, 2022 |
| Centos_linux | — | Upgrade kernel | Nov 9, 2022 | Mar 13, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Aug 2, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Jun 22, 2022 | Mar 13, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 11, 2022 | Mar 13, 2022 |
| Msft | — | 2022-09 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5017328) | Sep 13, 2022 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 24, 2022 | Mar 8, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Nov 9, 2022 | Mar 13, 2022 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debug | Mar 12, 2024 | Mar 13, 2022 |
| Suse | — | Upgrade kernel-64kbUpgrade arm-trusted-firmware-rk3328Upgrade kernel-source-azureUpgrade arm-trusted-firmware-qemu_sbsaUpgrade arm-trusted-firmware-rpi3Upgrade arm-trusted-firmware-sun50i_a64Upgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-extraUpgrade arm-trusted-firmware-tegra210Upgrade arm-trusted-firmware-poplarUpgrade arm-trusted-firmware-sun50i_h6Upgrade kernel-default-optionalUpgrade arm-trusted-firmwareUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade arm-trusted-firmware-zynqmpUpgrade arm-trusted-firmware-toolsUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade arm-trusted-firmware-imx8mmUpgrade arm-trusted-firmware-rpi4Upgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade arm-trusted-firmware-imx8mqUpgrade arm-trusted-firmware-rk3368Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade arm-trusted-firmware-tegra186Upgrade kernel-azureUpgrade arm-trusted-firmware-qemu | Oct 26, 2022 | Mar 13, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-5.4.0-1066-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.14.0-1027-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1067-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1068-awsUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.4.0-1058-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1072-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-5.4.0-1065-gkeUpgrade linux-image-5.4.0-104-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1017-ibmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1030-bluefieldUpgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1036-gkeopUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-104-generic-lpaeUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-5.13.0-1017-azureUpgrade linux-image-5.4.0-1055-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1072-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oemUpgrade linux-image-5.4.0-104-generic | Mar 9, 2022 | Mar 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub