In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade perf6.12Upgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-libbpf-devel | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-azureUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-generic-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-6.14 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub