What’s Vulnerable › Vulnerabilities

CVE-2023-34320: arm: Guests can trigger a deadlock on Cortex-A77

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-08 · updated 2026-06-17
• Weakness: CWE-667

Description

Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device or non-cacheable memory, and either a store exclusive or register read of the Physical Address Register (PAR_EL1) in close proximity.

Affected products

• Arm Cortex-A77 Firmware: r0p0, r1p0
• xen: all versions

References

• https://xenbits.xenproject.org/xsa/advisory-436.html
• http://xenbits.xen.org/xsa/advisory-436.html
• https://xenbits.xenproject.org/xsa/advisory-436.html

Get alerted when CVE-2023-34320 or the next vulnerability affects your stack