Medium · published March 13, 2022
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
| Product | Versions | Fixed in |
|---|---|---|
| xen/xen | all versions | — |
| arm/cortex-r7_firmware | all versions | — |
| arm/cortex-r8_firmware | all versions | — |
| arm/cortex-a57_firmware | all versions | — |
| arm/cortex-a65_firmware | all versions | — |
| arm/cortex-a65ae_firmware | all versions | — |
| arm/cortex-a710_firmware | all versions | — |
| arm/cortex-a72_firmware | all versions | — |
| arm/cortex-a73_firmware | all versions | — |
| arm/cortex-a75_firmware | all versions | — |
| arm/cortex-a76_firmware | all versions | — |
| arm/cortex-a76ae_firmware | all versions | — |
| arm/cortex-a77_firmware | all versions | — |
| arm/cortex-a78_firmware | all versions | — |
| arm/cortex-a78ae_firmware | all versions | — |
| arm/cortex-x1_firmware | all versions | — |
| arm/cortex-x2_firmware | all versions | — |
| arm/neoverse-e1_firmware | all versions | — |
| arm/neoverse-v1_firmware | all versions | — |
| arm/neoverse_n1_firmware | all versions | — |
| arm/neoverse_n2_firmware | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |