Vulnerability
Branch Privilege Injection
Updates to Intel's indirect branch predictor can land after a switch to the kernel or after a barrier, weakening the hardware Spectre v2 mitigation.
- Also known as
- Indirect Branch Predictor Delayed Updates
- Kind
- Transient execution
- CVEs
- 3
- Published
- 2025
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2024-43420 | Shared predictor state: Atom (described below) | Intel | 2025-05-13 |
| CVE-2024-45332 | Indirect Branch Predictor Delayed Updates (Branch Privilege Injection) | Intel | 2025-05-13 |
| CVE-2025-20623 | Shared predictor state: 10th generation Core (described below) | Intel | 2025-05-13 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2024-43420: Shared predictor state: Atom
Shared branch predictor state that influences transient execution on Gemini Lake Atom processors; fixed in microcode with BPRC. INTEL-SA-01247. Source. CVE record (2025-05-13).
CVE-2025-20623: Shared predictor state: 10th generation Core
Shared branch predictor state that influences transient execution on Ice Lake client processors; fixed in microcode with BPRC. INTEL-SA-01247. Source. CVE record (2025-05-13).