Medium severity5.5NVD Advisory· Published Jun 8, 2020· Updated Jun 17, 2026

CVE-2020-13844

Description

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Cortex A32 Firmware
cpe:2.3:o:arm:cortex-a32_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A34 Firmware
cpe:2.3:o:arm:cortex-a34_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A35 Firmware
cpe:2.3:o:arm:cortex-a35_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A53 Firmware
cpe:2.3:o:arm:cortex-a53_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A57 Firmware
cpe:2.3:o:arm:cortex-a57_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A72 Firmware
cpe:2.3:o:arm:cortex-a72_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A73 Firmware
cpe:2.3:o:arm:cortex-a73_firmware:-:*:*:*:*:*:*:*
OpenSUSE/Leap2 versions
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
Arm/Armv8-A core implementationsdescription
Arm/ARMv8llm-fuzzy
osv-coords67 versions
pkg:rpm/opensuse/cross-nvptx-gcc10&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/cross-nvptx-gcc10&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/gcc10&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/gcc10&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/gcc10&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/gcc7&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/gcc7&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/gcc7&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/nvptx-tools&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/nvptx-tools&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1 pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Toolchain%2012 pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/cross-nvptx-gcc10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1 pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Toolchain%2012 pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/gcc10&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/gcc10&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Toolchain%2012 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/gcc10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/gcc10&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/gcc10&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/gcc10&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/gcc10&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/gcc10&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Toolchain%2012 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/gcc7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/nvptx-tools&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/nvptx-tools&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/nvptx-tools&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1 pkg:rpm/suse/nvptx-tools&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/nvptx-tools&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/nvptx-tools&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015
< 10.2.1+git583-lp151.2.1+ 66 more
- (no CPE)range: < 10.2.1+git583-lp151.2.1
- (no CPE)range: < 10.2.1+git583-lp152.2.1
- (no CPE)range: < 10.2.1+git583-lp151.2.2
- (no CPE)range: < 10.2.1+git583-lp152.2.2
- (no CPE)range: < 10.3.1+git1893-2.8
- (no CPE)range: < 7.5.0+r278197-lp151.2.15.1
- (no CPE)range: < 7.5.0+r278197-lp152.3.3.1
- (no CPE)range: < 7.5.0+r278197-10.1
- (no CPE)range: < 1.0-lp151.3.3.2
- (no CPE)range: < 1.0-lp152.4.3.2
- (no CPE)range: < 10.2.1+git583-1.3.2
- (no CPE)range: < 10.2.1+git583-1.3.2
- (no CPE)range: < 10.2.1+git583-1.3.2
- (no CPE)range: < 10.2.1+git583-1.3.2
- (no CPE)range: < 10.2.1+git583-1.3.1
- (no CPE)range: < 10.2.1+git583-1.3.2
- (no CPE)range: < 10.2.1+git583-1.3.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-13.1
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.4
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 10.2.1+git583-1.3.5
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-13.1
- (no CPE)range: < 7.5.0+r278197-13.1
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 7.5.0+r278197-13.1
- (no CPE)range: < 7.5.0+r278197-4.19.2
- (no CPE)range: < 1.0-4.3.2
- (no CPE)range: < 1.0-4.3.2
- (no CPE)range: < 1.0-4.3.2
- (no CPE)range: < 1.0-4.3.2
- (no CPE)range: < 1.0-4.3.2
- (no CPE)range: < 1.0-4.3.2

Patches

Vulnerability mechanics

References

gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.htmlnvdPatchThird Party Advisory
lists.llvm.org/pipermail/llvm-dev/2020-June/142109.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.htmlnvdMailing ListThird Party Advisory
developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilitynvdVendor Advisory
developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculationnvdVendor Advisory
developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questionsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000