CVE-2022-23960: Arm Cortex-a57 Firmware

Medium severity, CVSS 5.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

Affected products

• Arm Cortex-a57 Firmware: affected versions not specified
• Arm Cortex-a65 Firmware: affected versions not specified
• Arm Cortex-a65ae Firmware: affected versions not specified
• Arm Cortex-a710 Firmware: affected versions not specified
• Arm Cortex-a72 Firmware: affected versions not specified
• Arm Cortex-a73 Firmware: affected versions not specified
• Arm Cortex-a75 Firmware: affected versions not specified
• Arm Cortex-a76 Firmware: affected versions not specified
• Arm Cortex-a76ae Firmware: affected versions not specified
• Arm Cortex-a77 Firmware: affected versions not specified
• Arm Cortex-a78 Firmware: affected versions not specified
• Arm Cortex-a78ae Firmware: affected versions not specified
• Arm Cortex-r7 Firmware: affected versions not specified
• Arm Cortex-r8 Firmware: affected versions not specified
• Arm Cortex-x1 Firmware: affected versions not specified
• Arm Cortex-x2 Firmware: affected versions not specified
• Arm Neoverse-e1 Firmware: affected versions not specified
• Arm Neoverse-v1 Firmware: affected versions not specified
• Arm Neoverse n1 Firmware: affected versions not specified
• Arm Neoverse n2 Firmware: affected versions not specified
• Debian Debian Linux: version 9.0 only; version 10.0 only
• Xen Xen: affected versions not specified

Published 2022-03-13. Last modified 2026-10-08.