Lucene search
HistoryOct 04, 2023 - 4:15 a.m.
CVE-2023-5370
cpu 0
smccc workaround
speculative execution
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
5.6
Confidence
High
EPSS
0
Percentile
5.1%
On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0.
Affected configurations
Node
freebsdfreebsdMatch13.2-
Related
freebsd
freebsd
FreeBSD -- arm64 boot CPUs may lack speculative execution protections
2023-10-03 00:00:00
prion
prion
Code injection
2023-10-04 04:15:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:14.smccc
2023-10-03 00:00:00
vulnrichment
vulnrichment
CVE-2023-5370 arm64 boot CPUs may lack speculative execution protections
2023-10-04 03:59:45
cve
cve
CVE-2023-5370
2023-10-04 04:15:15
cvelist
cvelist
CVE-2023-5370 arm64 boot CPUs may lack speculative execution protections
2023-10-04 03:59:45
nessus
nessus
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
5.6
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-5370