CVE Vulnerability

CVE-2022-23824

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040 Mitigation Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/11/10/2 Mailing List Mitigation
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/ Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Information

Published : 2022-11-09 09:15

Updated : 2022-12-03 02:15

NVD link : CVE-2022-23824

Mitre link : CVE-2022-23824

Products Affected

Amd

Epyc 7451

CWE
NVD-CWE-noinfo