CVE-2023-5370 arm64 boot CPUs may lack speculative execution protections

2023-10-0403:59:45

CWE-665

freebsd

www.cve.org

cve-2023-5370; arm64 cpus; speculative execution

EPSS

Percentile

5.1%

JSON

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "arm64"
    ],
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "lessThan": "p4",
        "status": "affected",
        "version": "13.2-RELEASE",
        "versionType": "release"
      }
    ]
  }
]