In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.29-33.102 | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub