CVE-2024-5660

EUVD-2024-47147
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 44.39%
Affected Products (NVD)
VendorProductVersion
armcortex-a710_firmware
-
armcortex-a77_firmware
-
armcortex-a78_firmware
-
armcortex-a78ae_firmware
-
armcortex-a78c_firmware
-
armcortex-x1_firmware
-
armcortex-x1c_firmware
-
armcortex-x2_firmware
-
armcortex-x3_firmware
-
armcortex-x4_firmware
-
armcortex-x925_firmware
-
armneoverse_n2_firmware
-
armneoverse-v1_firmware
-
armneoverse-v2_firmware
-
armneoverse-v3_firmware
-
armneoverse-v3ae_firmware
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
arm-trusted-firmware
bookworm
no-dsa
bullseye
postponed
forky
2.12.1+dfsg-1
fixed
sid
2.12.1+dfsg-1
fixed
trixie
2.12.1+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
arm-trusted-firmware
focal
needs-triage
jammy
needs-triage
noble
needs-triage
oracular
ignored
plucky
ignored
questing
ignored
resolute
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cluster-md-kmp-default
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
dlm-kmp-default
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
gfs2-kmp-default
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
kernel-64kb
suse enterprise desktop 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.51.1
fixed
kernel-default
suse enterprise desktop 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.51.1
fixed
kernel-default-base
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
kernel-default-man
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP7
6.4.0-150700.51.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.51.2
fixed
suse enterprise server 15 SP7
6.4.0-150700.51.2
fixed
kernel-source
suse enterprise desktop 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.51.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.51.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.51.1
fixed
ocfs2-kmp-default
suse enterprise sap 12 SP5
4.12.14-122.244.1
fixed
suse enterprise server 12 SP5
4.12.14-122.244.1
fixed