MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2022-23960

CVSS 5.6v3.1pub. 2022-03-13upd. 2024-11-21

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

  • Arm Cortex A57

    HW
    Arm
    all versions

  • Arm Cortex A57 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A65

    HW
    Arm
    all versions

  • Arm Cortex A65ae

    HW
    Arm
    all versions

  • Arm Cortex A65ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A65 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A710

    HW
    Arm
    all versions

  • Arm Cortex A710 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A72

    HW
    Arm
    all versions

  • Arm Cortex A72 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A73

    HW
    Arm
    all versions

  • Arm Cortex A73 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A75

    HW
    Arm
    all versions

  • Arm Cortex A75 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A76

    HW
    Arm
    all versions

  • Arm Cortex A76ae

    HW
    Arm
    all versions

  • Arm Cortex A76ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A76 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A77

    HW
    Arm
    all versions

  • Arm Cortex A77 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A78

    HW
    Arm
    all versions

  • Arm Cortex A78ae

    HW
    Arm
    all versions

  • Arm Cortex A78ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A78 Firmware

    OS
    Arm
    all versions

  • Arm Cortex R7

    HW
    Arm
    all versions

  • Arm Cortex R7 Firmware

    OS
    Arm
    all versions

  • Arm Cortex R8

    HW
    Arm
    all versions

  • Arm Cortex R8 Firmware

    OS
    Arm
    all versions

  • Arm Cortex X1

    HW
    Arm
    all versions

  • Arm Cortex X1 Firmware

    OS
    Arm
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓same product

RCE przez deserializację PHP w Roundcube Webmail (parametr _from)

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2025-24201CRITICAL10.0⚠ KEVPL ✓same product

Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki