CVE-2023-3006

2023-05-3100:00:00

ubuntu.com

cache speculation vulnerability

spectre-bhb

ampereone

branch history injection

spectre v2

cpu branch history buffer

bugzilla

redhat

suse

unix

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.3%

JSON

A known cache speculation vulnerability, known as Branch History Injection
(BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne.
Spectre-BHB is similar to Spectre v2, except that malicious code uses the
shared branch history (stored in the CPU Branch History Buffer, or BHB) to
influence mispredicted branches within the victim’s hardware context. Once
that occurs, speculation caused by the mispredicted branches can cause
cache allocation. This issue leads to obtaining information that should not
be accessible.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-223.235UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-169.187UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-60.66UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-31.32UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1166.179UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1116.126UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1030.34UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1019.20UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1030.34~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1116.126~18.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-223.235	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-169.187	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-60.66	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-31.32	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1166.179	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1116.126	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1030.34	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1019.20	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1030.34~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1116.126~18.04.1	UNKNOWN