PT-2022-17245 · Amperecomputing+1 · Ampere Altra Firmware+15

Published 2022-03-09 · Updated 2022-03-16 · CVE-2022-25368

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description Spectre BHB is a variant of Spectre-v2 where malicious code exploits the shared branch history stored in the CPU BHB to influence mispredicted branches in the victim's hardware context. This can lead to speculation that causes cache allocation, potentially allowing the inference of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-25368

Affected Products

Ampere Altra Firmware

Cortex-A15 Firmware

Cortex-A57 Firmware

Cortex-A65Ae Firmware

Cortex-A710 Firmware

Cortex-A72 Firmware

Cortex-A73 Firmware

Cortex-A75 Firmware

Cortex-A76 Firmware

Cortex-A77 Firmware

Cortex-A78 Firmware

Cortex-X1 Firmware

Cortex-X2 Firmware

Neoverse-E1 Firmware

Neoverse N1 Firmware

Neoverse N2 Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-25368 · Security Note
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb · Vendor Advisory
• https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960 · Note