CVE-2022-25368
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history ...
CVE-2022-25368 is a medium vulnerability (CVSS 4.7) in Amperecomputing Ampere Altra Firmware, published March 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. No source names a fixed version.
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
- Record
CVE-2022-25368- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
- Record
CVE-2022-25368- Updated
- 2026-11-02
EUVDEUVD-2022-30039 No score
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
- Record
EUVD-2022-30039- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5257-57v8-vjc5
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history ...
Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
- Record
GHSA-5257-57v8-vjc5- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
- amperecomputing ampere altra firmware
- amperecomputing ampere altra max firmware
- arm cortex-a15 firmware
- arm cortex-a57 firmware
- arm cortex-a65 firmware
- arm cortex-a65ae firmware
- arm cortex-a710 firmware
- arm cortex-a72 firmware
- arm cortex-a73 firmware
- arm cortex-a75 firmware
- arm cortex-a76 firmware
- arm cortex-a76ae firmware
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960
developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb
nvd.nist.gov/vuln/detail/CVE-2022-25368
github.com/advisories/GHSA-5257-57v8-vjc5