The TSV110 processor is affected by the Spectre‑BHB (Branch History Buffer) vulnerability, which allows an attacker to exploit the branch prediction side channel to read sensitive memory locations. In the Linux arm64 kernel, a software mitigation was added via a commit that records the processor’s MIDR in the Spectre‑BHB mitigation table, effectively suppressing the faulty branch prediction logic for that CPU. Without this safeguard, kernel‑mode code could potentially expose data that it should not access.

Any system running an arm64 Linux kernel that contains a TSV110 processor is vulnerable. The vulnerability is kernel‑wide and has no specific version bound; until the mitigation commit is incorporated into a kernel build, all arm64 kernels on a TSV110 are at risk. Other ARM CPUs are not affected.

The CVSS score of 5.5 indicates medium severity and the EPSS score of less than 1% reflects a low probability of exploitation. The vulnerability is currently not listed in the CISA KEV catalog. Based on the description, the plausible attack vector is local: an attacker with kernel or privileged code execution could activate the branch history buffer leak on a TSV110, resulting in data disclosure. Enabling the BHB mitigation in the kernel configuration and including the TSV110 MIDR in the mitigation list reduces the exposure.