Description
In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arm | Cortex-A72 | < r1p0 | r1p0 |
| Arm | Cortex-A73 | — | — |
| Arm | Cortex-A75 | — | — |
| Arm | Cortex-A57 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | kernel-livepatch-4.14.355-274.598 | 1.0-0.amzn2 | ALAS2-2025-2775 |
| Amazon Linux 2 | perf +8 | 4.14.355-274.598.amzn2 | ALAS2-2025-2775 |
Advisories 1
- ALAS2-2025-2775 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 8, 2025