Lucene search

K
cvelistIntelCVELIST:CVE-2022-29901
HistoryJul 12, 2022 - 12:00 a.m.

CVE-2022-29901 Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

2022-07-1200:00:00
CWE-200
intel
raw.githubusercontent.com
1

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.