CVEvulnerability

CVE-2024-5660

9.8 CRITICAL Published 2024-12-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-668

Description

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.

Affected configurations

• arm cortex-a710 firmware • arm cortex-a77 firmware • arm cortex-a78 firmware • arm cortex-a78ae firmware • arm cortex-a78c firmware • arm cortex-x1 firmware • arm cortex-x1c firmware • arm cortex-x2 firmware • arm cortex-x3 firmware • arm cortex-x4 firmware • arm cortex-x925 firmware • arm neoverse n2 firmware • arm neoverse-v1 firmware • arm neoverse-v2 firmware • arm neoverse-v3 firmware • arm neoverse-v3ae firmware

Related

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References