This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-15031 →

DEBIAN-CVE-2017-15031

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world tim...

Original description

The description as published by the source.

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 arm-trusted-firmware

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 arm-trusted-firmware

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 arm-trusted-firmware

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.16+dfsg-1"}]}]

References

advisory security-tracker.debian.org