In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.12.29-33.102 | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-socionextUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-renesas | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-6.14Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-oem-6.14 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub