CVEvulnerability
CVE-2022-29900
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-07-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-212
Description
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.
Affected configurations
• debian debian linux 11.0
• fedoraproject fedora 35
• fedoraproject fedora 36
• xen xen
• amd athlon x4 750 firmware
• amd athlon x4 760k firmware
• amd athlon x4 830 firmware
• amd athlon x4 835 firmware
• amd athlon x4 840 firmware
• amd athlon x4 845 firmware
• amd athlon x4 860k firmware
• amd athlon x4 870k firmware
• amd athlon x4 880k firmware
• amd athlon x4 940 firmware
• amd athlon x4 950 firmware
• amd athlon x4 970 firmware
• amd ryzen threadripper pro 3995wx firmware
• amd ryzen threadripper pro 3795wx firmware
• amd ryzen threadripper pro 3955wx firmware
• amd ryzen threadripper pro 3945wx firmware
• amd ryzen threadripper pro 5955wx firmware
• amd ryzen threadripper pro 5965wx firmware
• amd ryzen threadripper pro 5945wx firmware
• amd ryzen threadripper pro 5975wx firmware
• amd ryzen threadripper pro 5995wx firmware
• amd ryzen threadripper 2990wx firmware
• amd ryzen threadripper 2970wx firmware
• amd ryzen threadripper 2950x firmware
• amd ryzen threadripper 2920x firmware
• amd ryzen threadripper 3990x firmware
• amd ryzen threadripper 3970x firmware
• amd ryzen threadripper 3960x firmware
• amd a12-9700p firmware
• amd a12-9730p firmware
• amd a10-9600p firmware
• amd a10-9630p firmware
• amd a9-9410 firmware
• amd a9-9420 firmware
• amd a6-9210 firmware
• amd a6-9220 firmware
• amd a6-9220c firmware
• amd a4-9120 firmware
• amd ryzen 3 2200u firmware
• amd ryzen 3 2300u firmware
• amd ryzen 5 2500u firmware
• amd ryzen 5 2600 firmware
• amd ryzen 5 2600h firmware
• amd ryzen 5 2600x firmware
• amd ryzen 5 2700 firmware
• amd ryzen 5 2700x firmware
• amd ryzen 7 2700 firmware
• amd ryzen 7 2700u firmware
• amd ryzen 7 2700x firmware
• amd ryzen 7 2800h firmware
• amd ryzen 3 3100 firmware
• amd ryzen 3 3200u firmware
• amd ryzen 3 3250u firmware
• amd ryzen 3 3300g firmware
• amd ryzen 3 3300u firmware
• amd ryzen 3 3300x firmware
… and 67 more
Related
Weakness · CWE (1)
- CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness
References
- https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202402-07 security.gentoo.org
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037 www.amd.com
- https://www.debian.org/security/2022/dsa-5207 www.debian.org
- https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/ www.secpod.com
- https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202402-07 security.gentoo.org
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037 www.amd.com
- https://www.debian.org/security/2022/dsa-5207 www.debian.org
- https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/ www.secpod.com