In specific ARM processors, there is a possible side-channel information leak due to a hardware flaw. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23960US | medium5.6 | — | ||
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the… | ||||
02
references
External citations — patches, advisories, analysis.
- https://android.googlesource.com/kernel/common/+/0777e59b105c05cb46ea877130e672223e87e0e8FIX
- https://android.googlesource.com/kernel/common/+/124cc54b229a637e2ff7d70e5099ae4d6187e39fFIX
- https://android.googlesource.com/kernel/common/+/150ecd86887b2571214a4d998eb8597434ebb476FIX
- https://android.googlesource.com/kernel/common/+/15e43a2ac5e15c503c104831e9e2b6d5fc7d6131FIX
- https://android.googlesource.com/kernel/common/+/16ddad71e36c65545bef2ab577adbc3e40fe4668FIX
- https://android.googlesource.com/kernel/common/+/26e71fb73c4027d77a3212c8c9eff7e955e6ec45FIX
- https://android.googlesource.com/kernel/common/+/5e6ae4e3cb2b045d69ac9cee1ae282d267283799FIX
- https://android.googlesource.com/kernel/common/+/65b1e224b17749cad53443715dbf7f080338eac3FIX
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan