CVEvulnerability
CVE-2022-23825
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-07-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-668
Description
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
Affected configurations
• debian debian linux 11.0
• fedoraproject fedora 35
• fedoraproject fedora 36
• amd athlon x4 750 firmware
• amd athlon x4 760k firmware
• amd athlon x4 830 firmware
• amd athlon x4 835 firmware
• amd athlon x4 840 firmware
• amd athlon x4 845 firmware
• amd athlon x4 860k firmware
• amd athlon x4 870k firmware
• amd athlon x4 880k firmware
• amd athlon x4 940 firmware
• amd athlon x4 950 firmware
• amd athlon x4 970 firmware
• amd ryzen threadripper pro 3995wx firmware
• amd ryzen threadripper pro 3795wx firmware
• amd ryzen threadripper pro 3955wx firmware
• amd ryzen threadripper pro 3945wx firmware
• amd ryzen threadripper pro 5955wx firmware
• amd ryzen threadripper pro 5965wx firmware
• amd ryzen threadripper pro 5945wx firmware
• amd ryzen threadripper pro 5975wx firmware
• amd ryzen threadripper pro 5995wx firmware
• amd ryzen threadripper 2990wx firmware
• amd ryzen threadripper 2970wx firmware
• amd ryzen threadripper 2950x firmware
• amd ryzen threadripper 2920x firmware
• amd ryzen threadripper 3990x firmware
• amd ryzen threadripper 3970x firmware
• amd ryzen threadripper 3960x firmware
• amd a12-9700p firmware
• amd a12-9730p firmware
• amd a10-9600p firmware
• amd a10-9630p firmware
• amd a9-9410 firmware
• amd a9-9420 firmware
• amd a6-9210 firmware
• amd a6-9220 firmware
• amd a6-9220c firmware
• amd a4-9120 firmware
• amd ryzen 3 2200u firmware
• amd ryzen 3 2300u firmware
• amd ryzen 5 2500u firmware
• amd ryzen 5 2600 firmware
• amd ryzen 5 2600h firmware
• amd ryzen 5 2600x firmware
• amd ryzen 5 2700 firmware
• amd ryzen 5 2700x firmware
• amd ryzen 7 2700 firmware
• amd ryzen 7 2700u firmware
• amd ryzen 7 2700x firmware
• amd ryzen 7 2800h firmware
• amd ryzen 3 3100 firmware
• amd ryzen 3 3200u firmware
• amd ryzen 3 3250u firmware
• amd ryzen 3 3300g firmware
• amd ryzen 3 3300u firmware
• amd ryzen 3 3300x firmware
• amd ryzen 5 3400g firmware
… and 67 more
Related
Weakness · CWE (1)
- CWE-668 Exposure of Resource to Wrong Sphere weakness
References
- http://www.openwall.com/lists/oss-security/2022/11/08/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/11/10/2 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202402-07 security.gentoo.org
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037 Vendor Advisory
- https://www.debian.org/security/2022/dsa-5184 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/11/08/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/11/10/2 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202402-07 security.gentoo.org
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037 Vendor Advisory
- https://www.debian.org/security/2022/dsa-5184 Third Party Advisory