Login Request a demo
Medium severity · published Dec 8, 2023
CVE-2023-34320
Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device or non-cacheable memory, and either a store exclusive or register read of the Physical Address Register (PAR_EL1) in close proximity.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cortex-a77 Firmware · Arm
r0p0; r1p0 · source: NVD
XE
Xen · Xen
All versions, or not specified · source: NVD
Affected product
CF
Cortex-a77 Firmware
Arm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-34320
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-34320
Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-436.html
xenbits.xen.org
http://xenbits.xen.org/xsa/advisory-436.html
More from Cortex-a77 Firmware
9.8
CVE-2024-5660
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2,…
7.5
CVE-2022-48251
The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks
5.6
CVE-2022-23960
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB
4.7
CVE-2022-25368
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware…