CVE-2022-23960

Published: Mar 13, 2022Modified: Jun 17, 2026

5.6

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 1.1 / Impact: 4.0

Source: NVD

Description

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

Affected (23)

Products: Xen: Xen · Arm: Cortex R7 Firmware, Cortex R8 Firmware, Cortex A57 Firmware, Cortex A65 Firmware, Cortex A65ae Firmware, Cortex A710 Firmware, Cortex A72 Firmware, Cortex A73 Firmware, Cortex A75 Firmware, Cortex A76 Firmware, Cortex A76ae Firmware, Cortex A77 Firmware, Cortex A78 Firmware, Cortex A78ae Firmware, Cortex X1 Firmware, Cortex X2 Firmware, Neoverse E1 Firmware, Neoverse V1 Firmware, Neoverse N1 Firmware, Neoverse N2 Firmware · Debian: Debian Linux

1 product

20 products

Cortex A65ae Firmware

Cortex A76ae Firmware

Cortex A77 Firmware

Cortex A78 Firmware

Cortex A78ae Firmware

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex R7 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex R7	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex R8 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex R8	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A57 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A57	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A65 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A65	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A65ae Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A65ae	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A710 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A710	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A72 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A72	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A73 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A73	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A75 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A75	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A76 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A76	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A76ae Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A76ae	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A77 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A77	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A78 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A78	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A78ae Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A78ae	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X1 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X2 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse E1 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse E1	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V1 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V1	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse N1 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse N1	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse N2 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse N2	All versions

Configuration V

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

References (10)

http://www.openwall.com/lists/oss-security/2022/03/18/2

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

https://developer.arm.com/support/arm-security-updates

Source: cve@mitre.org

Vendor Advisory

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

Source: cve@mitre.org

MitigationPatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.debian.org/security/2022/dsa-5173

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/18/2