CVEvulnerability

CVE-2022-29901

6.5 MEDIUM Published 2022-07-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.6 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-668

Description

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Affected configurations

• intel core i7-6500u firmware • intel core i7-6510u firmware • intel core i7-6560u firmware • intel core i7-6567u firmware • intel core i7-6600u firmware • intel core i7-6650u firmware • intel core i7-6660u firmware • intel core i7-6700 firmware • intel core i7-6700hq firmware • intel core i7-6700k firmware • intel core i7-6700t firmware • intel core i7-6700te firmware • intel core i7-6770hq firmware • intel core i7-6820eq firmware • intel core i7-6820hk firmware • intel core i7-6820hq firmware • intel core i7-6822eq firmware • intel core i7-6870hq firmware • intel core i7-6920hq firmware • intel core i7-6970hq firmware • intel core i7-8550u firmware • intel core i7-8559u firmware • intel core i7-8650u firmware • intel core i7-8700b firmware • intel core i7-8700k firmware • intel core i7-8705g firmware • intel core i7-8706g firmware • intel core i7-8709g firmware • intel core i7-8750h firmware • intel core i7-8809g firmware • intel core i7-8850h firmware • intel core i3-6100 firmware • intel core i3-6100e firmware • intel core i3-6100h firmware • intel core i3-6100t firmware • intel core i3-6100te firmware • intel core i3-6100u firmware • intel core i3-6102e firmware • intel core i3-6110u firmware • intel core i3-6120 firmware • intel core i3-6120t firmware • intel core i3-6167u firmware • intel core i3-6300 firmware • intel core i3-6300t firmware • intel core i3-6320 firmware • intel core i3-6320t firmware • intel core i3-8000 firmware • intel core i3-8000t firmware • intel core i3-8020 firmware • intel core i3-8100 firmware • intel core i3-8100h firmware • intel core i3-8100t firmware • intel core i3-8109u firmware • intel core i3-8120 firmware • intel core i3-8130u firmware • intel core i3-8145u firmware • intel core i3-8300 firmware • intel core i3-8300t firmware • intel core i3-8350k firmware • intel core i5-6200u firmware … and 71 more

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness

Referenced by CWE · observed example (1)

  • CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution weakness

References