๐Ÿ” CVE Alert

CVE-2023-3006

MEDIUM 5.5
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th

A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.

CWE CWE-226
Vendor n/a
Product kernel
Published May 31, 2023
Last Updated Jan 9, 2025
Stay Ahead of the Next One

Get instant alerts for n/a kernel

Be the first to know when new medium vulnerabilities affecting n/a kernel are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

n/a / Kernel
Linux Kernel 6.1-rc1

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
git.kernel.org: https://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git/commit/?id=0e5d5ae837c8