In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-toolsUpgrade bpftool-debuginfo | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-default-optional | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-oracleUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-24-genericUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-6.14Upgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04c | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub