Lucene search

K
osvGoogleOSV:CVE-2022-23960
HistoryMar 13, 2022 - 12:15 a.m.

CVE-2022-23960

2022-03-1300:15:07
Google
osv.dev
29
arm processors
neoverse processors
spectre-bhb
cache speculation
branch history buffer

EPSS

0.001

Percentile

22.9%

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.