VDB
ALPINE-CVE-2022-23960
ALPINE-CVE-2022-23960
PUBLISHED
CVSS 5.599999904632568 MEDIUM
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
Risk Scores
CVSS 3.1
5.599999904632568
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.12 | xen | 0, 4.0.1-r0, 4.0.1-r3 |
Timeline
- Mar 13, 2022 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated