What’s Vulnerable › Vulnerabilities

CVE-2022-25368

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-10 · updated 2026-06-17

Description

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

Affected products

• Amperecomputing Ampere Altra Firmware: all versions
• Amperecomputing Ampere Altra Max Firmware: all versions
• Arm Cortex-A15 Firmware: all versions
• Arm Cortex-A57 Firmware: all versions
• Arm Cortex-A65 Firmware: all versions
• Arm Cortex-A65Ae Firmware: all versions
• Arm Cortex-A710 Firmware: all versions
• Arm Cortex-A72 Firmware: all versions
• Arm Cortex-A73 Firmware: all versions
• Arm Cortex-A75 Firmware: all versions
• Arm Cortex-A76 Firmware: all versions
• Arm Cortex-A76Ae Firmware: all versions
• Arm Cortex-A77 Firmware: all versions
• Arm Cortex-A78 Firmware: all versions
• Arm Cortex-A78Ae Firmware: all versions
• Arm Cortex-A78C Firmware: all versions
• Arm Cortex-X1 Firmware: all versions
• Arm Cortex-X2 Firmware: all versions
• Arm Neoverse-E1 Firmware: all versions
• Arm Neoverse-V1 Firmware: all versions
• Arm Neoverse N1 Firmware: all versions
• Arm Neoverse N2 Firmware: all versions

References

• https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb
• https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb

Get alerted when CVE-2022-25368 or the next vulnerability affects your stack