CVE-2025-37929

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays

Commit a5951389e58d ("arm64: errata: Add newer ARM cores to the

spectre_bhb_loop_affected() lists") added some additional CPUs to the

Spectre-BHB workaround, including some new arrays for designs that

require new 'k' values for the workaround to be effective.

Unfortunately, the new arrays omitted the sentinel entry and so

is_midr_in_range_list() will walk off the end when it doesn't find a

match. With UBSAN enabled, this leads to a crash during boot when

is_midr_in_range_list() is inlined (which was more common prior to

c8c2647e69be ("arm64: Make  _midr_in_range_list() an exported

function")):

| Internal error: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP

| pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

| pc : spectre_bhb_loop_affected+0x28/0x30

| lr : is_spectre_bhb_affected+0x170/0x190

| [...]

| Call trace:

| spectre_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References