PT-2025-3695 · Arm64 Cpu+1 · Arm64 Cpu+1

Published 2025-01-28 · Updated 2025-12-31 · CVE-2024-7881

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions arm64 CPU (affected versions not specified)

Description The issue allows an unprivileged context to trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced. This is a side-channel vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Side Channel Attack

Weakness Enumeration

CWE-126

CWE-1422

CWE-203

Related Identifiers

ASB-A-361573291

BDU:2025-05341

CVE-2024-7881

OESA-2025-1342

OESA-2025-1343

OESA-2025-1344

OESA-2025-1345

Affected Products

Debian

Arm64 Cpu

References · 26

• https://osv.dev/vulnerability/DEBIAN-CVE-2024-7881 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/arm-trusted-firmware · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1342 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7881 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05341 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-7881 · Vendor Advisory
• https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVE-2024-7881 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-361573291 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1344 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7881 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7881 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-7881 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1343 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-7881 · Vendor Advisory