Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-23825
HistoryJul 12, 2022 - 12:00 a.m.

CVE-2022-23825

2022-07-1200:00:00
ubuntu.com
ubuntu.com
27

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.7%

JSON

Aliases in the branch predictor may cause some AMD processors to predict
the wrong branch type potentially leading to information disclosure.

Notes

Author Note
sbeattie related to Retbleed, likely addressed in that patch series.
cascardo general BTC, addressed with IBPB and BTC_NO

Related

veracode 1
cve 1
redhatcve 1
prion 1
osv 8
debiancve 1
mscve 1
xen 2
citrix 1
fedora 4
nessus 39
amd 1
ibm 2
vmware 3
oraclelinux 3
mageia 2
redhat 13
thn 1
rocky 2
almalinux 4
debian 1
suse 3
mskb 15
kaspersky 2
gentoo 1
rapid7blog 1
avleonov 1
veracode
veracode
Information Disclosure
2022-07-15 01:44:11
cve
cve
CVE-2022-23825
2022-07-14 20:15:00
redhatcve
redhatcve
CVE-2022-23825
2022-07-13 05:14:11
prion
prion
Information disclosure
2022-07-14 20:15:00
osv
osv
CVE-2022-23825
2022-07-14 20:15:08
Important: kernel security, bug fix, and enhancement update
2022-10-25 07:23:52
Important: kernel security, bug fix, and enhancement update
2022-10-25 00:00:00
debiancve
debiancve
CVE-2022-23825
2022-07-14 20:15:00
mscve
mscve
AMD: CVE-2022-23825 AMD CPU Branch Type Confusion
2022-07-12 07:00:00
xen
xen
x86: Multiple speculative security issues
2022-11-08 17:34:00
Retbleed - arbitrary speculative code execution with return instructions
2022-07-12 16:35:00
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2022-23825 and CVE-2022-29900
2022-07-12 16:49:54
fedora
fedora
[SECURITY] Fedora 36 Update: xen-4.16.1-6.fc36
2022-07-18 01:09:01
[SECURITY] Fedora 36 Update: kernel-5.18.11-200.fc36
2022-07-14 01:49:14
[SECURITY] Fedora 35 Update: kernel-5.18.11-100.fc35
2022-07-15 01:37:00
nessus
nessus
Fedora 36 : kernel (2022-c69ef9c1dd)
2022-07-14 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-127)
2022-09-06 00:00:00
Oracle Linux 7 : kernel (ELSA-2022-7337)
2022-11-03 00:00:00
amd
amd
AMD CPU Branch Type Confusion
2022-07-12 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in VMware ESXi affect IBM Cloud Pak System
2023-03-31 16:13:36
Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2023-03-29 18:49:02
vmware
vmware
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2022-11-03 00:00:00
kernel security, bug fix, and enhancement update
2022-10-26 00:00:00
kernel security, bug fix, and enhancement update
2022-11-22 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2022-08-06 18:43:47
Updated kernel packages fix security vulnerabilities
2022-08-06 18:43:47
redhat
redhat
(RHSA-2022:7337) Important: kernel security and bug fix update
2022-11-02 16:03:50
(RHSA-2022:7338) Important: kernel-rt security and bug fix update
2022-11-02 16:04:02
(RHSA-2022:7134) Important: kernel-rt security and bug fix update
2022-10-25 07:38:43
thn
thn
Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
2023-08-09 15:39:00
rocky
rocky
kernel-rt security and bug fix update
2022-10-25 07:38:43
kernel security, bug fix, and enhancement update
2022-10-25 07:23:52
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-10-25 00:00:00
Important: kernel-rt security and bug fix update
2022-10-25 00:00:00
Moderate: kernel security, bug fix, and enhancement update
2022-11-15 00:00:00
debian
debian
[SECURITY] [DSA 5184-1] xen security update
2022-07-15 18:05:47
suse
suse
Security update for xen (important)
2022-09-01 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
mskb
mskb
March 14, 2023—KB5023754 (Security-only update)
2023-03-14 07:00:00
March 14, 2023—KB5023755 (Monthly Rollup)
2023-03-14 07:00:00
March 14, 2023—KB5023759 (Security-only update)
2023-03-14 07:00:00
kaspersky
kaspersky
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
2022-07-12 00:00:00
KLA12580 Multiple vulnerabilities in Microsoft Windows
2022-07-12 00:00:00
gentoo
gentoo
Xen: Multiple Vulnerabilities
2024-02-04 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - July 2022
2022-07-12 19:40:15
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.7%

JSON
Related for UB:CVE-2022-23825
veracode1cve1redhatcve1prion1osv8debiancve1mscve1xen2citrix1fedora4nessus39amd1ibm2vmware3oraclelinux3mageia2redhat13thn1rocky2almalinux4debian1suse3mskb15kaspersky2gentoo1rapid7blog1avleonov1