#VU65007 Processor optimization removal or modification of security-critical code in ARM products - CVE-2022-23960

Vulnerability identifier: #VU65007

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-23960

CWE-ID: CWE-1037

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Cortex-R7
Cortex-R8
Cortex-A57
Cortex-A65
Cortex-A65AE
Cortex-A72
Cortex-A73
Cortex-A75
Cortex-A76
Cortex-A77
Cortex-A78
Cortex-A78AE
Cortex-A710
Neoverse-E1
Neoverse-N1
Neoverse-V1
Neoverse-N2
Cortex-X1
Cortex-X2

Software vendor:
ARM

The vulnerability allows a local user to obtain potentially sensitive information.

The vulnerability exists due to improper restrictions of cache speculation. A local user can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches and gain access to sensitive information.

The vulnerability was dubbed Spectre-BHB.

Install updates from vendor's website.

• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
• https://developer.arm.com/support/arm-security-updates
• http://www.openwall.com/lists/oss-security/2022/03/18/2