CVSS: 4.7EPSS: 0%CPEs: 44EXPL: 0CVE-2022-25368
https://notcve.org/view.php?id=CVE-2022-25368
09 Mar 2022 — Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected. Spectre BHB es una variante de Spectre-v2 en la que el código malicioso usa el historial de bifurcaciones compartido (almacenado en el BHB de la CPU)... • https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html •
CVSS: 5.6EPSS: 0%CPEs: 63EXPL: 0CVE-2022-23960 – hw: cpu: arm64: Spectre-BHB
https://notcve.org/view.php?id=CVE-2022-23960
09 Mar 2022 — Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information. Algunos procesadores Arm Cortex y Neoverse versiones hasta 08-03-2022 no restringen apropiadamente la especulación de la caché, también conocida como Spectre-BHB. Un atacante puede aprovec... • http://www.openwall.com/lists/oss-security/2022/03/18/2 •