CVE-2024-5660: 
Linux Kernel vulnerability analysis and mitigation

A hardware vulnerability identified as CVE-2024-5660 affects multiple Arm processor cores including Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, and Neoverse N2. The vulnerability involves the use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation that may permit bypass of Stage-2 translation and/or GPT protection (ARM Security, NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue is related to the interaction between Hardware Page Aggregation (HPA) and translation stages, potentially compromising security boundaries (NVD).

The vulnerability could allow attackers to bypass Stage-2 translation and/or GPT protection mechanisms, potentially compromising the security of affected systems. Given the CRITICAL CVSS score of 9.8, this indicates severe potential consequences if exploited (NVD).