CVE-2023-5370

Summary

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0.

Affected Software

Weaknesses

• CWE-665: CWE-665 Improper Initialization

ADP Enrichment

CVE Program Container

Additional References

• https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc
• https://security.netapp.com/advisory/ntap-20231124-0005/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc
• https://security.netapp.com/advisory/ntap-20231124-0005/

• ←Previous
• Next→