CVEvulnerability
CVE-2022-25368
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Description
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
Affected configurations
• amperecomputing ampere altra max firmware
• amperecomputing ampere altra firmware
• arm neoverse-e1 firmware
• arm neoverse-v1 firmware
• arm cortex-a57 firmware
• arm cortex-a65 firmware
• arm cortex-a65ae firmware
• arm cortex-a72 firmware
• arm cortex-a73 firmware
• arm cortex-a75 firmware
• arm cortex-a76 firmware
• arm cortex-a76ae firmware
• arm cortex-a77 firmware
• arm cortex-a78 firmware
• arm cortex-a78ae firmware
• arm cortex-a78c firmware
• arm cortex-x1 firmware
• arm cortex-x2 firmware
• arm cortex-a710 firmware
• arm cortex-a15 firmware
• arm neoverse n1 firmware
• arm neoverse n2 firmware
References
- https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html Vendor Advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960 Third Party Advisory, VDB Entry
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb Patch, Technical Description, Vendor Advisory
- https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html Vendor Advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960 Third Party Advisory, VDB Entry
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb Patch, Technical Description, Vendor Advisory