Vulnerability Details : CVE-2022-23960

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
Publish Date : 2022-03-13 Last Update Date : 2023-01-20

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	1.9
Confidentiality Impact	Partial (There is considerable informational disclosure.)
Integrity Impact	None (There is no impact to the integrity of the system)
Availability Impact	None (There is no impact to the availability of the system.)
Access Complexity	Medium (The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Obtain Information
CWE ID	CWE id is not defined for this vulnerability

- Related OVAL Definitions

Title	Definition Id	Class	Family
RHSA-2022:7683: kernel security, bug fix, and enhancement update (Moderate)	oval:com.redhat.rhsa:def:20227683		unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2022-23960

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	OS	Debian	Debian Linux	9.0	*	*	*	Version Details Vulnerabilities
2	OS	Debian	Debian Linux	10.0	*	*	*	Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Debian	Debian Linux	2

- References For CVE-2022-23960

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
MLIST [debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update

https://www.debian.org/security/2022/dsa-5173
DEBIAN DSA-5173

https://developer.arm.com/support/arm-security-updates

http://www.openwall.com/lists/oss-security/2022/03/18/2
MLIST [oss-security] 20220318 Xen Security Advisory 398 v2 - Multiple speculative security issues

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * * ARM Cortex-a72 * * * ARM Cortex-a72 Firmware * * * ARM Cortex-a73 * * * ARM Cortex-a73 Firmware * * * ARM Cortex-a75 * * * ARM Cortex-a75 Firmware * * * ARM Cortex-a76 * * * ARM Cortex-a76 Firmware * * * ARM Cortex-a76ae * * * ARM Cortex-a76ae Firmware * * * ARM Cortex-a77 * * * ARM Cortex-a77 Firmware * * * ARM Cortex-a78 * * * ARM Cortex-a78 Firmware * * * ARM Cortex-a78ae * * * ARM Cortex-a78ae Firmware * * * ARM Cortex-r7 * * * ARM Cortex-r7 Firmware * * * ARM Cortex-r8 * * * ARM Cortex-r8 Firmware * * * ARM Cortex-x1 * * * ARM Cortex-x1 Firmware * * * ARM Cortex-x2 * * * ARM Cortex-x2 Firmware * * * ARM Neoverse N1 * * * ARM Neoverse N1 Firmware * * * ARM Neoverse N2 * * * ARM Neoverse N2 Firmware * * * ARM Neoverse-e1 * * * ARM Neoverse-e1 Firmware * * * ARM Neoverse-v1 * * * ARM Neoverse-v1 Firmware * * * XEN XEN * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 10.0 * * * Debian Debian Linux 9.0 * * *	ARM Cortex-a57 * * * ARM Cortex-a57 Firmware * * * ARM Cortex-a65 * * * ARM Cortex-a65 Firmware * * * ARM Cortex-a65ae * * * ARM Cortex-a65ae Firmware * * * ARM Cortex-a710 * * * ARM Cortex-a710 Firmware * * *

- Metasploit Modules Related To CVE-2022-23960

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)