Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade arm-trusted-firmware | Aug 8, 2025 | Dec 10, 2024 |
| Debian | — | Upgrade arm-trusted-firmware | May 15, 2025 | Dec 10, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-devel | Jan 30, 2025 | Dec 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub