CVEs-PoC/2022/CVE-2022-23960.md

CVE-2022-23960

Description

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

POC

Reference

• https://developer.arm.com/support/arm-security-updates
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

Github

• https://github.com/ARPSyndicate/cvemon