⌘ + K

UBUNTU-CVE-2022-23960

Dashboard / Vulnerabilities / UBUNTU-CVE-2022-23960

UBUNTU-CVE-2022-23960

Published: 8 Mar 2022Last Modified: 17 Sept 2026

Upstream:

Aliases:

Summary:

Details: Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

References: https://ubuntu.com/security/CVE-2022-23960, https://www.vusec.net/projects/bhi-spectre-bhb/, https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb, https://developer.arm.com/documentation/ka004995/latest/, https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BHI, https://ubuntu.com/security/notices/USN-5317-1, https://ubuntu.com/security/notices/USN-5318-1, https://ubuntu.com/security/notices/USN-5362-1, https://www.cve.org/CVERecord?id=CVE-2022-23960

Affected packages

Package

Name: linux-azure

Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=trusty%2Fesm

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -4.15.0-1142.156~14.04.1

Affected versions

4.15.0-1023.24~14.04.1

4.15.0-1030.31~14.04.1

4.15.0-1031.32~14.04.1

4.15.0-1032.33~14.04.2

4.15.0-1035.36~14.04.2

4.15.0-1036.38~14.04.2

4.15.0-1037.39~14.04.2

4.15.0-1039.41~14.04.2

4.15.0-1040.44~14.04.1

4.15.0-1041.45~14.04.1

4.15.0-1042.46~14.04.1

4.15.0-1045.49~14.04.1

4.15.0-1046.50~14.04.1

4.15.0-1047.51~14.04.1

4.15.0-1049.54~14.04.1

4.15.0-1050.55~14.04.1

4.15.0-1051.56~14.04.1

4.15.0-1052.57~14.04.1

4.15.0-1055.60~14.04.1

4.15.0-1056.61~14.04.1

4.15.0-1057.62~14.04.1

4.15.0-1059.64~14.04.1

4.15.0-1060.65~14.04.1

4.15.0-1061.66~14.04.1

4.15.0-1063.68~14.04.1

4.15.0-1064.69~14.04.1

4.15.0-1066.71~14.04.1

4.15.0-1067.72~14.04.1

4.15.0-1069.74~14.04.1

4.15.0-1071.76~14.04.1

4.15.0-1074.79~14.04.1

4.15.0-1077.82~14.04.1

4.15.0-1082.92~14.04.1

4.15.0-1083.93~14.04.1

4.15.0-1089.99~14.04.1

4.15.0-1091.101~14.04.1

4.15.0-1092.102~14.04.1

4.15.0-1093.103~14.04.1

4.15.0-1095.105~14.04.1

4.15.0-1096.106~14.04.1

4.15.0-1098.109~14.04.1

4.15.0-1100.111~14.04.1

4.15.0-1102.113~14.04.1

4.15.0-1103.114~14.04.1

4.15.0-1106.118~14.04.1

4.15.0-1108.120~14.04.1

4.15.0-1109.121~14.04.1

4.15.0-1110.122~14.04.1

4.15.0-1111.123~14.04.1

4.15.0-1112.124~14.04.1

4.15.0-1113.126~14.04.1

4.15.0-1114.127~14.04.1

4.15.0-1115.128~14.04.1

4.15.0-1118.131~14.04.1

4.15.0-1121.134~14.04.1

4.15.0-1122.135~14.04.1

4.15.0-1123.136~14.04.1

4.15.0-1124.137~14.04.1

4.15.0-1125.138~14.04.1

4.15.0-1126.139~14.04.1

4.15.0-1127.140~14.04.1

4.15.0-1129.142~14.04.1

4.15.0-1130.143~14.04.1

4.15.0-1131.144~14.04.1

4.15.0-1133.146~14.04.1

4.15.0-1134.147~14.04.1

4.15.0-1136.149~14.04.1

4.15.0-1137.150~14.04.1

4.15.0-1138.151~14.04.1

4.15.0-1139.152~14.04.1

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High