{"id":"CVE-2026-43261","title":"arm64: Add support for TSV110 Spectre-BHB mitigation","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64: Add support for TSV110 Spectre-BHB mitigation\n\nThe TSV110 processor is vulnerable to the Spectre-BHB (Branch History\nBuffer) attack, which can be exploited to le…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e192c8baa69ac8a5585d61ac535aa1e5eb795e80 < 598c11dd4f4a9de31d854fcb9702f54c1c70f0d0","Linux >= 4bbfd0c280254b273c564767021bb9b0f945148e < a8d0ad5d990b050a6db74218a34b5529085e16b8","Linux >= 558c303c9734af5a813739cd284879227f7297d2 < cccf96c49f61e47d9332d6a4d1c7fe9a2df44440","Linux >= 558c303c9734af5a813739cd284879227f7297d2 < fd7e360845d331f542854d552469544182e61134","Linux >= 558c303c9734af5a813739cd284879227f7297d2 < 5dbe1f14359735fa50ba0dd4a496125b5bc7f422","Linux >= 558c303c9734af5a813739cd284879227f7297d2 < fd51d47fcacec3ca027eb65d8c44853d3b6cea95","Linux >= 558c303c9734af5a813739cd284879227f7297d2 < ad0c356cae164ed5dbd1f4cfd438e46faa5292cb","Linux >= 558c303c9734af5a813739cd284879227f7297d2 < e3baa5d4b361276efeb87b20d8beced451a7dbd5","Linux 4dd8aae585a51a1d276911fe19096ad90144e9fe","Linux 3e3904125fccd042fda24294624e8f66699fd06d","Linux c20d551744797000c4af993f7d59ef8c69732949","Linux 9013fd4bc958b33c3b4d5a2eaf4ded9857600395","Linux 0b2bf1b37b5ebd90e69e30d8c2d6e1cd0c1f37b4","Linux >= 5.10.105 < 5.10.252","Linux >= 5.15.28 < 5.15.202","Linux >= 4.9.310 < 4.10","Linux >= 4.14.275 < 4.15","Linux >= 4.19.236 < 4.20","Linux >= 5.4.186 < 5.5","Linux >= 5.16.14 < 5.17","Linux 5.17"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:32:15.330551Z"},"published":"2026-05-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:32:38.191Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43261","references":[{"url":"https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0"},{"url":"https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8"},{"url":"https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440"},{"url":"https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134"},{"url":"https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422"},{"url":"https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95"},{"url":"https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb"},{"url":"https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5"}],"tags":["cve.org"],"epss":0.00128,"epssPercentile":0.02475,"ingestedAt":"2026-11-06T15:54:04.000Z","slug":"CVE-2026-43261","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: Add support for TSV110 Spectre-BHB mitigation\n\nThe TSV110 processor is vulnerable to the Spectre-BHB (Branch History\nBuffer) attack, which can be exploited to leak information through\nbranch prediction side channels. This commit adds the MIDR of TSV110\nto the list for software mitigation.\n\n## Affected\n\n- `Linux >= e192c8baa69ac8a5585d61ac535aa1e5eb795e80 < 598c11dd4f4a9de31d854fcb9702f54c1c70f0d0`\n- `Linux >= 4bbfd0c280254b273c564767021bb9b0f945148e < a8d0ad5d990b050a6db74218a34b5529085e16b8`\n- `Linux >= 558c303c9734af5a813739cd284879227f7297d2 < cccf96c49f61e47d9332d6a4d1c7fe9a2df44440`\n- `Linux >= 558c303c9734af5a813739cd284879227f7297d2 < fd7e360845d331f542854d552469544182e61134`\n- `Linux >= 558c303c9734af5a813739cd284879227f7297d2 < 5dbe1f14359735fa50ba0dd4a496125b5bc7f422`\n- `Linux >= 558c303c9734af5a813739cd284879227f7297d2 < fd51d47fcacec3ca027eb65d8c44853d3b6cea95`\n- `Linux >= 558c303c9734af5a813739cd284879227f7297d2 < ad0c356cae164ed5dbd1f4cfd438e46faa5292cb`\n- `Linux >= 558c303c9734af5a813739cd284879227f7297d2 < e3baa5d4b361276efeb87b20d8beced451a7dbd5`\n- `Linux 4dd8aae585a51a1d276911fe19096ad90144e9fe`\n- `Linux 3e3904125fccd042fda24294624e8f66699fd06d`\n- `Linux c20d551744797000c4af993f7d59ef8c69732949`\n- `Linux 9013fd4bc958b33c3b4d5a2eaf4ded9857600395`\n- `Linux 0b2bf1b37b5ebd90e69e30d8c2d6e1cd0c1f37b4`\n- `Linux >= 5.10.105 < 5.10.252`\n- `Linux >= 5.15.28 < 5.15.202`\n- `Linux >= 4.9.310 < 4.10`\n- `Linux >= 4.14.275 < 4.15`\n- `Linux >= 4.19.236 < 4.20`\n- `Linux >= 5.4.186 < 5.5`\n- `Linux >= 5.16.14 < 5.17`\n- `Linux 5.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}