A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | May 31, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel | May 30, 2024 | May 31, 2023 |
| Suse | — | Upgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-develUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-default-devel | Jun 15, 2023 | May 31, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-169-genericUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-ibmUpgrade linux-image-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1028-iotUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-4.15.0-1175-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1160-gcp | Dec 12, 2023 | May 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub