CVEvulnerability

CVE-2022-25368

4.7 MEDIUM Published 2022-03-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N

Description

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

Affected configurations

• amperecomputing ampere altra max firmware • amperecomputing ampere altra firmware • arm neoverse-e1 firmware • arm neoverse-v1 firmware • arm cortex-a57 firmware • arm cortex-a65 firmware • arm cortex-a65ae firmware • arm cortex-a72 firmware • arm cortex-a73 firmware • arm cortex-a75 firmware • arm cortex-a76 firmware • arm cortex-a76ae firmware • arm cortex-a77 firmware • arm cortex-a78 firmware • arm cortex-a78ae firmware • arm cortex-a78c firmware • arm cortex-x1 firmware • arm cortex-x2 firmware • arm cortex-a710 firmware • arm cortex-a15 firmware • arm neoverse n1 firmware • arm neoverse n2 firmware

References