CVE-2023-52481

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A speculatively executed unprivileged load on an affected Cortex-A520 core might leak data from a privileged load via a cache side channel. The issue only exists for loads within a translation regime with the same translation, and it only affects the return to EL0. The workaround is to execute a TLBI before returning to EL0 after all loads of privileged data. A non-shareable TLBI to any address is sufficient. This workaround is not necessary if page table isolation (KPTI) is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.