CVE-2026-43261

In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer) attack, which can be exploited to leak information through branch prediction side channels. This commit adds the MIDR of TSV110 to the list for software mitigation.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0	Patch
https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422	Patch
https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8	Patch
https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb	Patch
https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440	Patch
https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5	Patch
https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95	Patch
https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

11 Nov 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: arm64: Añadir soporte para la mitigación de Spectre-BHB de TSV110 El procesador TSV110 es vulnerable al ataque Spectre-BHB (Branch History Buffer), que puede ser explotado para filtrar información a través de canales laterales de predicción de ramas. Este commit añade el MIDR de TSV110 a la lista para la mitigación por software.

Information

Published : 2026-05-06 12:16

Updated : 2026-11-11 23:10

NVD link : CVE-2026-43261

Mitre link : CVE-2026-43261

CVE.ORG link : CVE-2026-43261

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-43261", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43261", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:32:15.330551Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e192c8baa69ac8a5585d61ac535aa1e5eb795e80", "lessThan": "598c11dd4f4a9de31d854fcb9702f54c1c70f0d0", "versionType": "git"}, {"status": "affected", "version": "4bbfd0c280254b273c564767021bb9b0f945148e", "lessThan": "a8d0ad5d990b050a6db74218a34b5529085e16b8", "versionType": "git"}, {"status": "affected", "version": "558c303c9734af5a813739cd284879227f7297d2", "lessThan": "cccf96c49f61e47d9332d6a4d1c7fe9a2df44440", "versionType": "git"}, {"status": "affected", "version": "558c303c9734af5a813739cd284879227f7297d2", "lessThan": "fd7e360845d331f542854d552469544182e61134", "versionType": "git"}, {"status": "affected", "version": "558c303c9734af5a813739cd284879227f7297d2", "lessThan": "5dbe1f14359735fa50ba0dd4a496125b5bc7f422", "versionType": "git"}, {"status": "affected", "version": "558c303c9734af5a813739cd284879227f7297d2", "lessThan": "fd51d47fcacec3ca027eb65d8c44853d3b6cea95", "versionType": "git"}, {"status": "affected", "version": "558c303c9734af5a813739cd284879227f7297d2", "lessThan": "ad0c356cae164ed5dbd1f4cfd438e46faa5292cb", "versionType": "git"}, {"status": "affected", "version": "558c303c9734af5a813739cd284879227f7297d2", "lessThan": "e3baa5d4b361276efeb87b20d8beced451a7dbd5", "versionType": "git"}, {"status": "affected", "version": "4dd8aae585a51a1d276911fe19096ad90144e9fe", "versionType": "git"}, {"status": "affected", "version": "3e3904125fccd042fda24294624e8f66699fd06d", "versionType": "git"}, {"status": "affected", "version": "c20d551744797000c4af993f7d59ef8c69732949", "versionType": "git"}, {"status": "affected", "version": "9013fd4bc958b33c3b4d5a2eaf4ded9857600395", "versionType": "git"}, {"status": "affected", "version": "0b2bf1b37b5ebd90e69e30d8c2d6e1cd0c1f37b4", "versionType": "git"}, {"status": "affected", "version": "5.10.105", "lessThan": "5.10.252", "versionType": "semver"}, {"status": "affected", "version": "5.15.28", "lessThan": "5.15.202", "versionType": "semver"}, {"status": "affected", "version": "4.9.310", "lessThan": "4.10", "versionType": "semver"}, {"status": "affected", "version": "4.14.275", "lessThan": "4.15", "versionType": "semver"}, {"status": "affected", "version": "4.19.236", "lessThan": "4.20", "versionType": "semver"}, {"status": "affected", "version": "5.4.186", "lessThan": "5.5", "versionType": "semver"}, {"status": "affected", "version": "5.16.14", "lessThan": "5.17", "versionType": "semver"}], "programFiles": ["arch/arm64/kernel/proton-pack.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.17"}, {"status": "unaffected", "version": "0", "lessThan": "5.17", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/arm64/kernel/proton-pack.c"], "defaultStatus": "affected"}]}], "published": "2026-05-06T12:16:47.003", "references": [{"url": "https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: Add support for TSV110 Spectre-BHB mitigation\n\nThe TSV110 processor is vulnerable to the Spectre-BHB (Branch History\nBuffer) attack, which can be exploited to leak information through\nbranch prediction side channels. This commit adds the MIDR of TSV110\nto the list for software mitigation."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\narm64: A\u00f1adir soporte para la mitigaci\u00f3n de Spectre-BHB de TSV110\n\nEl procesador TSV110 es vulnerable al ataque Spectre-BHB (Branch History Buffer), que puede ser explotado para filtrar informaci\u00f3n a trav\u00e9s de canales laterales de predicci\u00f3n de ramas. Este commit a\u00f1ade el MIDR de TSV110 a la lista para la mitigaci\u00f3n por software."}], "lastModified": "2026-11-11T23:10:00.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2770DCE-CDE6-4088-B12D-5CE167E99137", "versionEndExcluding": "5.10.252", "versionStartIncluding": "5.10.105"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654", "versionEndExcluding": "6.1.165", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}