MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2022-25368

CVSS 4.7v3.1pub. 2022-03-10upd. 2024-11-21

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

  • Amperecomputing Ampere Altra

    HW
    Amperecomputing
    all versions

  • Amperecomputing Ampere Altra Firmware

    OS
    Amperecomputing
    all versions

  • Amperecomputing Ampere Altra Max

    HW
    Amperecomputing
    all versions

  • Amperecomputing Ampere Altra Max Firmware

    OS
    Amperecomputing
    all versions

  • Arm Cortex A15

    HW
    Arm
    all versions

  • Arm Cortex A15 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A57

    HW
    Arm
    all versions

  • Arm Cortex A57 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A65

    HW
    Arm
    all versions

  • Arm Cortex A65ae

    HW
    Arm
    all versions

  • Arm Cortex A65ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A65 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A710

    HW
    Arm
    all versions

  • Arm Cortex A710 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A72

    HW
    Arm
    all versions

  • Arm Cortex A72 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A73

    HW
    Arm
    all versions

  • Arm Cortex A73 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A75

    HW
    Arm
    all versions

  • Arm Cortex A75 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A76

    HW
    Arm
    all versions

  • Arm Cortex A76ae

    HW
    Arm
    all versions

  • Arm Cortex A76ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A76 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A77

    HW
    Arm
    all versions

  • Arm Cortex A77 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A78

    HW
    Arm
    all versions

  • Arm Cortex A78ae

    HW
    Arm
    all versions

  • Arm Cortex A78ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A78c

    HW
    Arm
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-5660CRITICAL9.8PL ✓same product

Arm Cortex/Neoverse: obejście ochrony Stage-2 przez Hardware Page Aggregation

CVE-2022-46892CRITICAL9.8PL ✓same product

Nieprawidłowa kontrola dostępu w Ampere Altra/AltraMax — reinicjalizacja root complex

CVE-2022-32295CRITICAL9.8PL ✓same product

Niezabezpieczony dostęp do SPI-NOR w firmware Ampere Altra i Altra Max

CVE-2025-0647HIGH7.9same product

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidati...

CVE-2022-48251HIGH7.5same product

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-...