CVE-2023-5370CWE-665

arm64 boot CPUs may lack speculative execution protections

published October 4, 2023

CVSS
—
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-665 · Improper Initialization
Published
2023-10-04T03:59Z
EPSS history
Timeline
  • 04 OCT 03:59Z
    arm64 boot CPUs may lack speculative execution protections
    cvelistv5