The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.12.29-33.102 | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-socionextUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-renesas | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-6.14Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-oem-6.14 | Jun 26, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub