CVE-2022-23960

🗓️ 12 Mar 2022 23:57:21Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 499 Views

Certain Arm Cortex and Neoverse processors do not properly restrict cache speculation, aka Spectre-BHB. The attacker can leverage shared branch history to influence mispredicted branches and obtain sensitive information

Reporter	Title	Published	Views	Family All 211
ATTACKERKB	CVE-2022-23960	13 Mar 202200:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-039)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1761 (ALAS-2022-1761)	8 Mar 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-011 (ALASKERNEL-5.10-2022-011)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-012 (ALASKERNEL-5.10-2022-012)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-023 (ALASKERNEL-5.4-2022-023)	24 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2022-1571)	8 Mar 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0125: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0125)	14 May 202500:00	–	nessus

NVD

Node

xen xenMatch-

AND

arm cortex-a57Match-

arm cortex-a65Match-

arm cortex-a65aeMatch-

arm cortex-a710Match-

arm cortex-a72Match-

arm cortex-a73Match-

arm cortex-a75Match-

arm cortex-a76Match-

arm cortex-a76aeMatch-

arm cortex-a77Match-

arm cortex-a78Match-

arm cortex-a78aeMatch-

arm cortex-r7Match-

arm cortex-r8Match-

arm cortex-x1Match-

arm cortex-x2Match-

arm neoverse-e1Match-

arm neoverse-v1Match-

arm neoverse_n1Match-

arm neoverse_n2Match-

Node

arm cortex-r7_firmwareMatch-

AND

arm cortex-r7Match-

Node

arm cortex-r8_firmwareMatch-

AND

arm cortex-r8Match-

Node

arm cortex-a57_firmwareMatch-

AND

arm cortex-a57Match-

Node

arm cortex-a65_firmwareMatch-

AND

arm cortex-a65Match-

Node

arm cortex-a65ae_firmwareMatch-

AND

arm cortex-a65aeMatch-

Node

arm cortex-a710_firmwareMatch-

AND

arm cortex-a710Match-

Node

arm cortex-a72_firmwareMatch-

AND

arm cortex-a72Match-

Node

arm cortex-a73_firmwareMatch-

AND

arm cortex-a73Match-

Node

arm cortex-a75_firmwareMatch-

AND

arm cortex-a75Match-

Node

arm cortex-a76_firmwareMatch-

AND

arm cortex-a76Match-

Node

arm cortex-a76ae_firmwareMatch-

AND

arm cortex-a76aeMatch-

Node

arm cortex-a77_firmwareMatch-

AND

arm cortex-a77Match-

Node

arm cortex-a78_firmwareMatch-

AND

arm cortex-a78Match-

Node

arm cortex-a78ae_firmwareMatch-

AND

arm cortex-a78aeMatch-

Node

arm cortex-x1_firmwareMatch-

AND

arm cortex-x1Match-

Node

arm cortex-x2_firmwareMatch-

AND

arm cortex-x2Match-

Node

arm neoverse-e1_firmwareMatch-

AND

arm neoverse-e1Match-

Node

arm neoverse-v1_firmwareMatch-

AND

arm neoverse-v1Match-

Node

arm neoverse_n1_firmwareMatch-

AND

arm neoverse_n1Match-

Node

arm neoverse_n2_firmwareMatch-

AND

arm neoverse_n2Match-

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Source	Link
developer	www.developer.arm.com/support/arm-security-updates
developer	www.developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
lists	www.lists.debian.org/debian-lts-announce/2022/07/msg00000.html
openwall	www.openwall.com/lists/oss-security/2022/03/18/2
debian	www.debian.org/security/2022/dsa-5173

21 Nov 2024 06:49Current

6.4Medium risk

Vulners AI Score6.4

CVSS 21.9

CVSS 3.15.6

EPSS0.00229