What’s Vulnerable › Vulnerabilities

CVE-2023-5370: arm64 boot CPUs may lack speculative execution protections

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-04 · updated 2026-06-17
• Weakness: CWE-665

Description

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0.

Affected products

• FreeBSD: 13.2

References

• https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc
• https://security.netapp.com/advisory/ntap-20231124-0005/
• https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc
• https://security.netapp.com/advisory/ntap-20231124-0005/

Get alerted when CVE-2023-5370 or the next vulnerability affects your stack