In the Linux kernel, the following vulnerability has been resolved:
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists") added some additional CPUs to the Spectre-BHB workaround, including some new arrays for designs that require new 'k' values for the workaround to be effective.
Unfortunately, the new arrays omitted the sentinel entry and so is_midr_in_range_list() will walk off the end when it doesn't find a match. With UBSAN enabled, this leads to a crash during boot when is_midr_in_range_list() is inlined (which was more common prior to c8c2647e69be ("arm64: Make _midr_in_range_list() an exported function")):
| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Call trace: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | Code: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ end trace 0000000000000000 ]--- | Kernel panic - not syncing: aarch64 BRK: Fatal exception
Add the missing sentinel entries.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel6.12Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade bpftoolUpgrade kernel6.12-debuginfo-common-x86_64 | Jul 11, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-renesas | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-generic | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub