p PatchFirst

CVE-2024-5660

CVE-2024-5660

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.

CVSS 9.8 · Critical · EPSS 0.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • cortex-a77

    Versions
    • 0: Affected (custom)

    No fix published

  • neoverse v1

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-a78ae

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-78c

    Versions
    • 0: Affected

    No fix published

  • cortex-x1c

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-a78

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-x1

    Versions
    • 0: Affected (custom)

    No fix published

  • neoverse n2

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-a710

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-x2

    Versions
    • 0: Affected (custom)

    No fix published

  • neoverse v2

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-x3

    Versions
    • 0: Affected (custom)

    No fix published

  • neoverse v3ae

    Versions
    • 0: Affected (custom)

    No fix published

  • neoverse v3

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-x4

    Versions
    • 0: Affected (custom)

    No fix published

  • cortex-x925

    Versions
    • 0: Affected (custom)

    No fix published

  • arm-trusted-firmware Debian:12

    Versions
    • 2.10.0+dfsg-1
    • 2.10.10+dfsg-1
    • 2.12.0+dfsg-1
    • 2.12.0+dfsg-2
    • 2.12.1+dfsg-1
    • 2.8.0+dfsg-1
    • 2.9.0+dfsg-1
    • 2.9.0+dfsg-2
    • 2.9.0+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.12.1+dfsg-1

    Update to 2.12.1+dfsg-1

  • arm-trusted-firmware Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.12.1+dfsg-1

    Update to 2.12.1+dfsg-1

  • arm-trusted-firmware Ubuntu:20.04:LTS

    Versions
    • 2.1-3
    • 2.2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Ubuntu:22.04:LTS

    Versions
    • 2.5+dfsg-1
    • 2.6+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Ubuntu:24.04:LTS

    Versions
    • 2.9.0+dfsg-3
    • 2.10.0+dfsg-1
    • 2.10.0+dfsg-1build1
    • 2.10.0+dfsg-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Ubuntu:25.10

    Versions
    • 2.10.0+dfsg-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Ubuntu:26.10

    Versions
    • 2.12.1+dfsg-1
    • 2.12.1+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →