Medium severity5.6NVD Advisory· Published Mar 13, 2022· Updated Jun 17, 2026

CVE-2022-23960

Description

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Cortex A57 Firmware
cpe:2.3:o:arm:cortex-a57_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A65 Firmware
cpe:2.3:o:arm:cortex-a65_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A65ae Firmware
cpe:2.3:o:arm:cortex-a65ae_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A710 Firmware
cpe:2.3:o:arm:cortex-a710_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A72 Firmware
cpe:2.3:o:arm:cortex-a72_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A73 Firmware
cpe:2.3:o:arm:cortex-a73_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A75 Firmware
cpe:2.3:o:arm:cortex-a75_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A76 Firmware
cpe:2.3:o:arm:cortex-a76_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A76ae Firmware
cpe:2.3:o:arm:cortex-a76ae_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A77 Firmware
cpe:2.3:o:arm:cortex-a77_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A78 Firmware
cpe:2.3:o:arm:cortex-a78_firmware:-:*:*:*:*:*:*:*
Arm/Cortex A78ae Firmware
cpe:2.3:o:arm:cortex-a78ae_firmware:-:*:*:*:*:*:*:*
Arm/Cortex R7 Firmware
cpe:2.3:o:arm:cortex-r7_firmware:-:*:*:*:*:*:*:*
Arm/Cortex R8 Firmware
cpe:2.3:o:arm:cortex-r8_firmware:-:*:*:*:*:*:*:*
Arm/Cortex X1 Firmware
cpe:2.3:o:arm:cortex-x1_firmware:-:*:*:*:*:*:*:*
Arm/Cortex X2 Firmware
cpe:2.3:o:arm:cortex-x2_firmware:-:*:*:*:*:*:*:*
Arm/Neoverse E1 Firmware
cpe:2.3:o:arm:neoverse-e1_firmware:-:*:*:*:*:*:*:*
Arm/Neoverse V1 Firmware
cpe:2.3:o:arm:neoverse-v1_firmware:-:*:*:*:*:*:*:*
Arm/Neoverse N1 Firmware
cpe:2.3:o:arm:neoverse_n1_firmware:-:*:*:*:*:*:*:*
Arm/Neoverse N2 Firmware
cpe:2.3:o:arm:neoverse_n2_firmware:-:*:*:*:*:*:*:*
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Xen/Xen
cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*
Arm/Cortex and Neoverse processorsdescription
Arm/Cortex Allm-fuzzy
Arm/Neoverse V1llm-fuzzy
osv-coords43 versions
pkg:rpm/almalinux/bpftool pkg:rpm/almalinux/kernel pkg:rpm/almalinux/kernel-abi-stablelists pkg:rpm/almalinux/kernel-core pkg:rpm/almalinux/kernel-cross-headers pkg:rpm/almalinux/kernel-debug pkg:rpm/almalinux/kernel-debug-core pkg:rpm/almalinux/kernel-debug-devel pkg:rpm/almalinux/kernel-debug-modules pkg:rpm/almalinux/kernel-debug-modules-extra pkg:rpm/almalinux/kernel-devel pkg:rpm/almalinux/kernel-doc pkg:rpm/almalinux/kernel-headers pkg:rpm/almalinux/kernel-modules pkg:rpm/almalinux/kernel-modules-extra pkg:rpm/almalinux/kernel-tools pkg:rpm/almalinux/kernel-tools-libs pkg:rpm/almalinux/kernel-tools-libs-devel pkg:rpm/almalinux/kernel-zfcpdump pkg:rpm/almalinux/kernel-zfcpdump-core pkg:rpm/almalinux/kernel-zfcpdump-devel pkg:rpm/almalinux/kernel-zfcpdump-modules pkg:rpm/almalinux/kernel-zfcpdump-modules-extra pkg:rpm/almalinux/perf pkg:rpm/almalinux/python3-perf pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_30&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
< 4.18.0-425.3.1.el8+ 42 more
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.18.0-425.3.1.el8
- (no CPE)range: < 4.12.14-16.97.1
- (no CPE)range: < 4.12.14-16.97.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-16.97.1
- (no CPE)range: < 4.12.14-16.97.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-122.116.1
- (no CPE)range: < 4.12.14-16.97.1
- (no CPE)range: < 4.12.14-16.97.1
- (no CPE)range: < 1-8.3.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2022/03/18/2nvdMailing ListPatchThird Party Advisory
developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilitynvdMitigationPatchVendor Advisory
developer.arm.com/support/arm-security-updatesnvdVendor Advisory
lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2022/dsa-5173nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.364
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000