Lack of data validation In arm-trusted-firmware
Description
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.18 | 2.8.32-r0 | ||
alpine v3.19 | 2.8.32-r0 | ||
alpine v3.20 | 2.8.32-r0 | ||
alpine v3.21 | 2.8.32-r0 | ||
 debian 12 | - | ||
debian 13 | 2.12.1+dfsg-1 | ||
debian 14 | 2.12.1+dfsg-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.