CVE-2022-25368: Medium severity Amperecomputing Ampere Altra Max Firmware vulnerability

Published Mar 9, 2022

Updated

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

Affected Software

44 affected components

Amperecomputing Ampere Altra Max Firmware

Amperecomputing Ampere Altra Max

Amperecomputing Ampere Altra Firmware

Amperecomputing Ampere Altra

Arm Neoverse-e1 Firmware

Arm Neoverse-e1

Arm Neoverse-v1 Firmware

Arm Neoverse-v1

Arm Cortex-a57 Firmware

Arm Cortex-A57

Arm Cortex-a65 Firmware

Arm Cortex-a65

Arm Cortex-a65ae Firmware

Arm Cortex-a65ae

Arm Cortex-a72 Firmware

Arm Cortex-A72

Arm Cortex-a73 Firmware

Arm Cortex-A73

Arm Cortex-a75 Firmware

Arm Cortex-A75

Arm Cortex-a76 Firmware

Arm Cortex-a76

Arm Cortex-a76ae Firmware

Arm Cortex-a76ae

Arm Cortex-a77 Firmware

Arm Cortex-A77

Arm Cortex-a78 Firmware

Arm Cortex-a78

Arm Cortex-a78ae Firmware

Arm Cortex-a78ae

Arm Cortex-a78c Firmware

Arm Cortex-a78c

Arm Cortex-x1 Firmware

Arm Cortex-x1

Arm Cortex-x2 Firmware

Arm Cortex-x2

Arm Cortex-a710 Firmware

Arm Cortex-a710

Arm Cortex-a15 Firmware

Arm Cortex-a15

Arm Neoverse N1 Firmware

Arm Neoverse N1

Arm Neoverse N2 Firmware

Arm Neoverse N2

Remediation

Patch Available

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb

Event History

Mar 9, 2022

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

Description

Frequently Asked Questions

What is CVE-2022-25368?

CVE-2022-25368 is a variant of Spectre-v2 called Spectre BHB, which allows malicious code to use shared branch history to influence mispredicted branches in the victim's hardware context.

How does CVE-2022-25368 work?

CVE-2022-25368 utilizes the shared branch history (stored in the CPU BHB) to cause cache allocation and potentially exploit speculation in the victim's hardware.

Which software is affected by CVE-2022-25368?

The Ampere Altra Max Firmware and Google Android (Neoverse-e1, Cortex-a65, Cortex-a65ae, Cortex-a72, Cortex-a73, Cortex-a75, Cortex-a76, Cortex-a76ae, Cortex-a77, Cortex-a78, Cortex-a78ae, Cortex-a78c, Cortex-x1) are affected by CVE-2022-25368.

What is the severity of CVE-2022-25368?

CVE-2022-25368 has a severity score of 4.7, which is considered medium.

Are Ampere Altra Max and Arm Neoverse-e1 vulnerable to CVE-2022-25368?

No, Ampere Altra Max and Arm Neoverse-e1 are not vulnerable to CVE-2022-25368.