Unscored CVE-2023-5370 EUVD-2023-57686GHSA-vf42-37cv-443p

arm64 boot CPUs may lack speculative execution protections

Published Oct 4, 2023 · Updated Feb 13, 2025 · Assigned by freebsd

Description

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0.

Affected products

Vendor	Product	Affected	Fixed
FreeBSD	FreeBSD	13.2-RELEASE – < p4	p4

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc vendor-advisory
https://security.netapp.com/advisory/ntap-20231124-0005/