Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

Published

2022-03-10T17:47:07.880

Last Modified

2024-11-21T06:52:05.403

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.4

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amperecomputing ampere_altra_max_firmware - Yes
Hardware amperecomputing ampere_altra_max - No
Operating System amperecomputing ampere_altra_firmware - Yes
Hardware amperecomputing ampere_altra - No
Operating System arm neoverse-e1_firmware - Yes
Hardware arm neoverse-e1 - No
Operating System arm neoverse-v1_firmware - Yes
Hardware arm neoverse-v1 - No
Operating System arm cortex-a57_firmware - Yes
Hardware arm cortex-a57 - No
Operating System arm cortex-a65_firmware - Yes
Hardware arm cortex-a65 - No
Operating System arm cortex-a65ae_firmware - Yes
Hardware arm cortex-a65ae - No
Operating System arm cortex-a72_firmware - Yes
Hardware arm cortex-a72 - No
Operating System arm cortex-a73_firmware - Yes
Hardware arm cortex-a73 - No
Operating System arm cortex-a75_firmware - Yes
Hardware arm cortex-a75 - No
Operating System arm cortex-a76_firmware - Yes
Hardware arm cortex-a76 - No
Operating System arm cortex-a76ae_firmware - Yes
Hardware arm cortex-a76ae - No
Operating System arm cortex-a77_firmware - Yes
Hardware arm cortex-a77 - No
Operating System arm cortex-a78_firmware - Yes
Hardware arm cortex-a78 - No
Operating System arm cortex-a78ae_firmware - Yes
Hardware arm cortex-a78ae - No
Operating System arm cortex-a78c_firmware - Yes
Hardware arm cortex-a78c - No
Operating System arm cortex-x1_firmware - Yes
Hardware arm cortex-x1 - No
Operating System arm cortex-x2_firmware - Yes
Hardware arm cortex-x2 - No
Operating System arm cortex-a710_firmware - Yes
Hardware arm cortex-a710 - No
Operating System arm cortex-a15_firmware - Yes
Hardware arm cortex-a15 - No
Operating System arm neoverse_n1_firmware - Yes
Hardware arm neoverse_n1 - No
Operating System arm neoverse_n2_firmware - Yes
Hardware arm neoverse_n2 - No
References