Description
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | gcc-avr +5 | No fix yet | — |
| Ubuntu 26.04 LTS | gcc-avr +5 | No fix yet | — |
| Ubuntu 25.10 | gcc-avr +5 | No fix yet | — |
| Ubuntu 24.04 LTS | gcc-3.3 +7 | No fix yet | — |
| Ubuntu 22.04 LTS | gcc-3.3 +9 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | gcc-10 | 10.2.0-5ubuntu1~20.04 | — |
| Ubuntu 20.04 LTS | gcc-7 +13 | No fix yet | — |
| Ubuntu 20.04 LTS | gcc-9 | 9.4.0-1ubuntu1~20.04 | — |
| Ubuntu 20.04 LTS | gcc-9-cross | 21ubuntu7 | — |
| Ubuntu 18.04 LTS | gcc-6 +22 | No fix yet | — |
| Ubuntu 16.04 LTS | gcc-3.3 +26 | No fix yet | — |
| Ubuntu 14.04 LTS | gcc-3.3 +7 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | cross-nvptx-gcc10 | 10.2.1+git583-1.3.2 | SUSE-SU-2020:2947-1 |
| SLES 15 SP2 | gcc10 | 10.2.1+git583-1.3.4 | SUSE-SU-2020:2947-1 |
| SLES 15 SP2 | gcc7 +1 | 7.5.0+r278197-4.19.2 | SUSE-SU-2020:3749-1 |
| SLES 15 SP2 | nvptx-tools | 1.0-4.3.2 | SUSE-SU-2020:2947-1 |
| SLES 15 SP1 | cross-nvptx-gcc10 | 10.2.1+git583-1.3.2 | SUSE-SU-2020:2947-1 |
| SLES 15 SP1 | gcc10 | 10.2.1+git583-1.3.4 | SUSE-SU-2020:2947-1 |
| SLES 15 SP1 | gcc7 +1 | 7.5.0+r278197-4.19.2 | SUSE-SU-2020:3749-1 |
| SLES 15 SP1 | nvptx-tools | 1.0-4.3.2 | SUSE-SU-2020:2947-1 |
| SLES 15 | cross-nvptx-gcc10 | 10.2.1+git583-1.3.2 | SUSE-SU-2020:2947-1 |
| SLES 15 | gcc10 | 10.2.1+git583-1.3.4 | SUSE-SU-2020:2947-1 |
| SLES 15 | gcc7 +1 | 7.5.0+r278197-4.19.2 | SUSE-SU-2020:3749-1 |
| SLES 15 | nvptx-tools | 1.0-4.3.2 | SUSE-SU-2020:2947-1 |
| SLES 12 SP5 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES 12 SP5 | gcc7 | 7.5.0+r278197-13.1 | SUSE-SU-2023:3662-1 |
| SLES 12 SP4 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES 12 SP2 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES 12 | cross-nvptx-gcc10 | 10.2.1+git583-1.3.1 | SUSE-SU-2020:3263-1 |
| SLES 12 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES 12 | gcc7 +1 | 7.5.0+r278197-13.1 | SUSE-SU-2023:3662-1 |
| SLES for SAP 15 | cross-nvptx-gcc10 | 10.2.1+git583-1.3.2 | SUSE-SU-2020:2947-1 |
| SLES for SAP 15 | gcc10 | 10.2.1+git583-1.3.4 | SUSE-SU-2020:2947-1 |
| SLES for SAP 15 | gcc7 +1 | 7.5.0+r278197-4.19.2 | SUSE-SU-2020:3749-1 |
| SLES for SAP 15 | nvptx-tools | 1.0-4.3.2 | SUSE-SU-2020:2947-1 |
| SLES for SAP 12 SP5 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES for SAP 12 SP5 | gcc7 | 7.5.0+r278197-13.1 | SUSE-SU-2023:3662-1 |
| SLES for SAP 12 SP4 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES for SAP 12 SP3 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLES for SAP 12 SP2 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SLE HPC 15 | cross-nvptx-gcc10 | 10.2.1+git583-1.3.2 | SUSE-SU-2020:2947-1 |
| SLE HPC 15 | gcc10 | 10.2.1+git583-1.3.4 | SUSE-SU-2020:2947-1 |
| SLE HPC 15 | gcc7 +1 | 7.5.0+r278197-4.19.2 | SUSE-SU-2020:3749-1 |
| SLE HPC 15 | nvptx-tools | 1.0-4.3.2 | SUSE-SU-2020:2947-1 |
| SUSE OpenStack Cloud Crowbar 9 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SUSE OpenStack Cloud Crowbar 8 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SUSE OpenStack Cloud 9 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SUSE OpenStack Cloud 8 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SUSE OpenStack Cloud 7 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SUSE HPE Helion OpenStack 8 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
| SUSE Enterprise Storage 5 | gcc10 | 10.2.1+git583-1.3.5 | SUSE-SU-2020:3263-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | gcc10 | 10.3.1+git1893-2.8 | openSUSE-SU-2024:10702-1 |
| openSUSE Tumbleweed | gcc7 | 7.5.0+r278197-10.1 | openSUSE-SU-2024:10703-1 |
| openSUSE Leap 15.2 | cross-nvptx-gcc10 | 10.2.1+git583-lp152.2.1 | openSUSE-SU-2020:1693-1 |
| openSUSE Leap 15.2 | gcc10 | 10.2.1+git583-lp152.2.2 | openSUSE-SU-2020:1693-1 |
| openSUSE Leap 15.2 | gcc7 | 7.5.0+r278197-lp152.3.3.1 | openSUSE-SU-2020:2301-1 |
| openSUSE Leap 15.2 | nvptx-tools | 1.0-lp152.4.3.2 | openSUSE-SU-2020:1693-1 |
| openSUSE Leap 15.1 | cross-nvptx-gcc10 | 10.2.1+git583-lp151.2.1 | openSUSE-SU-2020:1692-1 |
| openSUSE Leap 15.1 | gcc10 | 10.2.1+git583-lp151.2.2 | openSUSE-SU-2020:1692-1 |
| openSUSE Leap 15.1 | gcc7 | 7.5.0+r278197-lp151.2.15.1 | openSUSE-SU-2020:2300-1 |
| openSUSE Leap 15.1 | nvptx-tools | 1.0-lp151.3.3.2 | openSUSE-SU-2020:1692-1 |
Advisories 10
- openSUSE-SU-2024:10703-1 cpp7-7.5.0+r278197-10.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10702-1 cpp10-10.3.1+git1893-2.8 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3749-1 Security update for gcc7 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1693-1 Security update for gcc10, nvptx-tools SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2300-1 Security update for gcc7 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3662-1 Security update for gcc7 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2947-1 Security update for gcc10, nvptx-tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3263-1 Security update for gcc10 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2301-1 Security update for gcc7 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1692-1 Security update for gcc10, nvptx-tools SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
- https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
- http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
- openSUSE-SU-2020:1692 vendor-advisory
- openSUSE-SU-2020:1693 vendor-advisory