Strix
26.1K

CVE-2024-5660

CRITICALCVSS 9.8/10EPSS 0.54%

Last modified

CVE-2024-5660 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.

Description

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.54%

41.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ArmCortex-A710 FirmwareAll versions
ArmCortex-A77 FirmwareAll versions
ArmCortex-A78 FirmwareAll versions
ArmCortex-A78ae FirmwareAll versions
ArmCortex-A78c FirmwareAll versions
ArmCortex-X1 FirmwareAll versions
ArmCortex-X1c FirmwareAll versions
ArmCortex-X2 FirmwareAll versions
ArmCortex-X3 FirmwareAll versions
ArmCortex-X4 FirmwareAll versions
ArmCortex-X925 FirmwareAll versions
ArmNeoverse N2 FirmwareAll versions
ArmNeoverse-V1 FirmwareAll versions
ArmNeoverse-V2 FirmwareAll versions
ArmNeoverse-V3 FirmwareAll versions
ArmNeoverse-V3ae FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-5660?
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
How severe is CVE-2024-5660?
CVE-2024-5660 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.54% probability of exploitation in the next 30 days.
How do I fix CVE-2024-5660?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-5660?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST