CVE-2022-23824

EUVD-2022-28753
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
xenxen
-
amdathlon_x4_750_firmware
-
amdathlon_x4_760k_firmware
-
amdathlon_x4_830_firmware
-
amdathlon_x4_835_firmware
-
amdathlon_x4_840_firmware
-
amdathlon_x4_845_firmware
-
amdathlon_x4_860k_firmware
-
amdathlon_x4_870k_firmware
-
amdathlon_x4_880k_firmware
-
amdathlon_x4_940_firmware
-
amdathlon_x4_950_firmware
-
amdathlon_x4_970_firmware
-
amdryzen_threadripper_pro_3995wx_firmware
-
amdryzen_threadripper_pro_3795wx_firmware
-
amdryzen_threadripper_pro_3955wx_firmware
-
amdryzen_threadripper_pro_3945wx_firmware
-
amdryzen_threadripper_pro_5955wx_firmware
-
amdryzen_threadripper_pro_5965wx_firmware
-
amdryzen_threadripper_pro_5945wx_firmware
-
amdryzen_threadripper_pro_5975wx_firmware
-
amdryzen_threadripper_pro_5995wx_firmware
-
amdryzen_threadripper_2990wx_firmware
-
amdryzen_threadripper_2970wx_firmware
-
amdryzen_threadripper_2950x_firmware
-
amdryzen_threadripper_2920x_firmware
-
amdryzen_threadripper_3990x_firmware
-
amdryzen_threadripper_3970x_firmware
-
amdryzen_threadripper_3960x_firmware
-
amda12-9700p_firmware
-
amda12-9730p_firmware
-
amda10-9600p_firmware
-
amda10-9630p_firmware
-
amda9-9410_firmware
-
amda9-9420_firmware
-
amda6-9210_firmware
-
amda6-9220_firmware
-
amda6-9220c_firmware
-
amda4-9120_firmware
-
amdryzen_3_2200u_firmware
-
amdryzen_3_2300u_firmware
-
amdryzen_5_2500u_firmware
-
amdryzen_5_2600_firmware
-
amdryzen_5_2600h_firmware
-
amdryzen_5_2600x_firmware
-
amdryzen_5_2700_firmware
-
amdryzen_5_2700x_firmware
-
amdryzen_7_2700_firmware
-
amdryzen_7_2700u_firmware
-
amdryzen_7_2700x_firmware
-
amdryzen_7_2800h_firmware
-
amdryzen_3_3100_firmware
-
amdryzen_3_3200u_firmware
-
amdryzen_3_3250u_firmware
-
amdryzen_3_3300g_firmware
-
amdryzen_3_3300u_firmware
-
amdryzen_3_3300x_firmware
-
amdryzen_5_3400g_firmware
-
amdryzen_5_3450g_firmware
-
amdryzen_5_3500u_firmware
-
amdryzen_5_3550h_firmware
-
amdryzen_5_3600_firmware
-
amdryzen_5_3600x_firmware
-
amdryzen_5_3600xt_firmware
-
amdryzen_7_3700u_firmware
-
amdryzen_7_3700x_firmware
-
amdryzen_7_3750h_firmware
-
amdryzen_7_3800x_firmware
-
amdryzen_7_3800xt_firmware
-
amdryzen_5_3580u_firmware
-
amdryzen_7_pro_3700u_firmware
-
amdryzen_7_3780u_firmware
-
amdryzen_7_4700g_firmware
-
amdryzen_7_4700ge_firmware
-
amdryzen_5_4600g_firmware
-
amdryzen_5_4600ge_firmware
-
amdryzen_3_4300g_firmware
-
amdryzen_3_4300ge_firmware
-
amdryzen_9_4900h_firmware
-
amdryzen_7_4800u_firmware
-
amdryzen_7_4700u_firmware
-
amdryzen_7_4800h_firmware
-
amdryzen_5_4600u_firmware
-
amdryzen_5_4500u_firmware
-
amdryzen_5_4600h_firmware
-
amdryzen_3_4300u_firmware
-
amdryzen_9_5980hx_firmware
-
amdryzen_9_5980hs_firmware
-
amdryzen_7_5825u_firmware
-
amdryzen_9_5900hx_firmware
-
amdryzen_9_5900hs_firmware
-
amdryzen_7_5825c_firmware
-
amdryzen_7_5800h_firmware
-
amdryzen_5_5625u_firmware
-
amdryzen_7_5800hs_firmware
-
amdryzen_5_5625c_firmware
-
amdryzen_5_5600h_firmware
-
amdryzen_5_5600hs_firmware
-
amdryzen_7_5800u_firmware
-
amdryzen_5_5600u_firmware
-
amdryzen_5_5560u_firmware
-
amdryzen_3_5425u_firmware
-
amdryzen_3_5425c_firmware
-
amdryzen_3_5400u_firmware
-
amdryzen_3_5125c_firmware
-
amdathlon_gold_3150u_firmware
-
amdathlon_silver_3050u_firmware
-
amdepyc_7001_firmware
-
amdepyc_7251_firmware
-
amdepyc_7261_firmware
-
amdepyc_7281_firmware
-
amdepyc_7301_firmware
-
amdepyc_7351_firmware
-
amdepyc_7351p_firmware
-
amdepyc_7371_firmware
-
amdepyc_7401_firmware
-
amdepyc_7401p_firmware
-
amdepyc_7451_firmware
-
amdepyc_7501_firmware
-
amdepyc_7551_firmware
-
amdepyc_7551p_firmware
-
amdepyc_7601_firmware
-
amdepyc_7002_firmware
-
amdepyc_7252_firmware
-
amdepyc_7262_firmware
-
amdepyc_7272_firmware
-
amdepyc_7282_firmware
-
amdepyc_7302_firmware
-
amdepyc_7302p_firmware
-
amdepyc_7352_firmware
-
amdepyc_7402_firmware
-
amdepyc_7402p_firmware
-
amdepyc_7452_firmware
-
amdepyc_7502_firmware
-
amdepyc_7502p_firmware
-
amdepyc_7532_firmware
-
amdepyc_7542_firmware
-
amdepyc_7552_firmware
-
amdepyc_7642_firmware
-
amdepyc_7662_firmware
-
amdepyc_7702_firmware
-
amdepyc_7742_firmware
-
amdepyc_7f32_firmware
-
amdepyc_7f52_firmware
-
amdepyc_7f72_firmware
-
amdepyc_7h12_firmware
-
amdepyc_7773x_firmware
-
amdepyc_7763_firmware
-
amdepyc_7713p_firmware
-
amdepyc_7713_firmware
-
amdepyc_7663_firmware
-
amdepyc_7643_firmware
-
amdepyc_75f3_firmware
-
amdepyc_7573x_firmware
-
amdepyc_7543p_firmware
-
amdepyc_7543_firmware
-
amdepyc_7513_firmware
-
amdepyc_74f3_firmware
-
amdepyc_7473x_firmware
-
amdepyc_7443p_firmware
-
amdepyc_7443_firmware
-
amdepyc_7413_firmware
-
amdepyc_7373x_firmware
-
amdepyc_7313_firmware
-
amdepyc_7313p_firmware
-
amdepyc_7343_firmware
-
amdepyc_72f3_firmware
-
amdepyc_7003_firmware
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB5019970
1607 (x64, x86)
KB5019964
1809 (arm64, x64, x86)
KB5019966
20H2 (arm64, x86)
KB5019959
21H1 (arm64, x64, x86)
KB5019959
21H2 (arm64, x64, x86)
KB5019959
22H2 (arm64, x64, x86)
KB5019959
Windows 11
21H2 (arm64, x64)
KB5019961
22H2 (arm64, x64)
KB5019980
Windows 7
Service Pack 1 (x64, x86)
KB5020013
Windows 8.1
(x64, x86)
KB5020023
Windows RT 8.1
All
KB5020010
Windows Server 2008
Service Pack 2 (x64, x86)
KB5020019
Service Pack 2 Server Core (x64, x86)
KB5020019
Windows Server 2008 R2
Service Pack 1 (x64)
KB5020013
Service Pack 1 Server Core (x64)
KB5020013
Windows Server 2012
Server Core
KB5020009
Standard
KB5020009
Windows Server 2012 R2
Server Core
KB5020023
Standard
KB5020023
Windows Server 2016
Server Core
KB5019964
Standard
KB5019964
Windows Server 2019
Server Core
KB5019966
Standard
KB5019966
Windows Server 2022
Server Core
KB5019080
Standard
KB5019080
Debian logo
Debian Releases
Debian Product
Codename
xen
bookworm
4.17.3+10-g091466ba55-1~deb12u1
fixed
bullseye
4.14.6-1
fixed
bullseye (security)
4.14.5+94-ge49571868d-1
fixed
sid
4.17.3+36-g54dacb5c02-1
fixed
trixie
4.17.3+36-g54dacb5c02-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xen
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
ignored
xenial
needs-triage
References
http://www.openwall.com/lists/oss-security/2022/11/10/2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
https://security.gentoo.org/glsa/202402-07
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040
https://www.debian.org/security/2023/dsa-5378
http://www.openwall.com/lists/oss-security/2022/11/10/2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
https://security.gentoo.org/glsa/202402-07
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040
https://www.debian.org/security/2023/dsa-5378