In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-develUpgrade kernel-headersUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfo | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-source-rtUpgrade dtb-armUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatek | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-azureUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-oem-6.14Upgrade linux-image-realtime-6.14 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub