CVE-2022-29901

MEDIUM

5.6

Description

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

CVE Details

CVSS v3.1 Score5.6

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

Published7/12/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

debian:debian_linuxfedoraproject:fedoraintel:core_i3-6100intel:core_i3-6100_firmwareintel:core_i3-6100eintel:core_i3-6100e_firmwareintel:core_i3-6100hintel:core_i3-6100h_firmwareintel:core_i3-6100tintel:core_i3-6100t_firmwareintel:core_i3-6100teintel:core_i3-6100te_firmwareintel:core_i3-6100uintel:core_i3-6100u_firmwareintel:core_i3-6102eintel:core_i3-6102e_firmwareintel:core_i3-6110uintel:core_i3-6110u_firmwareintel:core_i3-6120intel:core_i3-6120_firmwareintel:core_i3-6120tintel:core_i3-6120t_firmwareintel:core_i3-6167uintel:core_i3-6167u_firmwareintel:core_i3-6300intel:core_i3-6300_firmwareintel:core_i3-6300tintel:core_i3-6300t_firmwareintel:core_i3-6320intel:core_i3-6320_firmwareintel:core_i3-6320tintel:core_i3-6320t_firmwareintel:core_i3-8000intel:core_i3-8000_firmwareintel:core_i3-8000tintel:core_i3-8000t_firmwareintel:core_i3-8020intel:core_i3-8020_firmwareintel:core_i3-8100intel:core_i3-8100_firmwareintel:core_i3-8100hintel:core_i3-8100h_firmwareintel:core_i3-8100tintel:core_i3-8100t_firmwareintel:core_i3-8109uintel:core_i3-8109u_firmwareintel:core_i3-8120intel:core_i3-8120_firmwareintel:core_i3-8130uintel:core_i3-8130u_firmwareintel:core_i3-8145uintel:core_i3-8145u_firmwareintel:core_i3-8300intel:core_i3-8300_firmwareintel:core_i3-8300tintel:core_i3-8300t_firmwareintel:core_i3-8350kintel:core_i3-8350k_firmwareintel:core_i5-6200uintel:core_i5-6200u_firmwareintel:core_i5-6210uintel:core_i5-6210u_firmwareintel:core_i5-6260uintel:core_i5-6260u_firmwareintel:core_i5-6267uintel:core_i5-6267u_firmwareintel:core_i5-6287uintel:core_i5-6287u_firmwareintel:core_i5-6300hqintel:core_i5-6300hq_firmwareintel:core_i5-6300uintel:core_i5-6300u_firmwareintel:core_i5-6310uintel:core_i5-6310u_firmwareintel:core_i5-6350hqintel:core_i5-6350hq_firmwareintel:core_i5-6360uintel:core_i5-6360u_firmwareintel:core_i5-6400intel:core_i5-6400_firmwareintel:core_i5-6400tintel:core_i5-6400t_firmwareintel:core_i5-6440eqintel:core_i5-6440eq_firmwareintel:core_i5-6440hqintel:core_i5-6440hq_firmwareintel:core_i5-6442eqintel:core_i5-6442eq_firmwareintel:core_i5-6500intel:core_i5-6500_firmwareintel:core_i5-6500tintel:core_i5-6500t_firmwareintel:core_i5-6500teintel:core_i5-6500te_firmwareintel:core_i5-6600intel:core_i5-6600_firmwareintel:core_i5-6600kintel:core_i5-6600k_firmwareintel:core_i5-6600tintel:core_i5-6600t_firmwareintel:core_i5-8200yintel:core_i5-8200y_firmwareintel:core_i5-8210yintel:core_i5-8210y_firmwareintel:core_i5-8250uintel:core_i5-8250u_firmwareintel:core_i5-8259uintel:core_i5-8259u_firmwareintel:core_i5-8265uintel:core_i5-8265u_firmwareintel:core_i5-8269uintel:core_i5-8269u_firmwareintel:core_i5-8300hintel:core_i5-8300h_firmwareintel:core_i5-8305gintel:core_i5-8305g_firmwareintel:core_i5-8310yintel:core_i5-8310y_firmwareintel:core_i5-8350uintel:core_i5-8350u_firmwareintel:core_i5-8365uintel:core_i5-8365u_firmwareintel:core_i5-8400intel:core_i5-8400_firmwareintel:core_i5-8400bintel:core_i5-8400b_firmwareintel:core_i5-8400hintel:core_i5-8400h_firmwareintel:core_i5-8400tintel:core_i5-8400t_firmwareintel:core_i5-8420intel:core_i5-8420_firmwareintel:core_i5-8420tintel:core_i5-8420t_firmwareintel:core_i5-8500intel:core_i5-8500_firmwareintel:core_i5-8500bintel:core_i5-8500b_firmwareintel:core_i5-8500tintel:core_i5-8500t_firmwareintel:core_i5-8550intel:core_i5-8550_firmwareintel:core_i5-8550uintel:core_i5-8550u_firmwareintel:core_i5-8600intel:core_i5-8600_firmwareintel:core_i5-8600kintel:core_i5-8600k_firmwareintel:core_i5-8600tintel:core_i5-8600t_firmwareintel:core_i5-8650intel:core_i5-8650_firmwareintel:core_i5-8650kintel:core_i5-8650k_firmwareintel:core_i7-6500uintel:core_i7-6500u_firmwareintel:core_i7-6510uintel:core_i7-6510u_firmwareintel:core_i7-6560uintel:core_i7-6560u_firmwareintel:core_i7-6567uintel:core_i7-6567u_firmwareintel:core_i7-6600uintel:core_i7-6600u_firmwareintel:core_i7-6650uintel:core_i7-6650u_firmwareintel:core_i7-6660uintel:core_i7-6660u_firmwareintel:core_i7-6700intel:core_i7-6700_firmwareintel:core_i7-6700hqintel:core_i7-6700hq_firmwareintel:core_i7-6700kintel:core_i7-6700k_firmwareintel:core_i7-6700tintel:core_i7-6700t_firmwareintel:core_i7-6700teintel:core_i7-6700te_firmwareintel:core_i7-6770hqintel:core_i7-6770hq_firmwareintel:core_i7-6820eqintel:core_i7-6820eq_firmwareintel:core_i7-6820hkintel:core_i7-6820hk_firmwareintel:core_i7-6820hqintel:core_i7-6820hq_firmwareintel:core_i7-6822eqintel:core_i7-6822eq_firmwareintel:core_i7-6870hqintel:core_i7-6870hq_firmwareintel:core_i7-6920hqintel:core_i7-6920hq_firmwareintel:core_i7-6970hqintel:core_i7-6970hq_firmwareintel:core_i7-8500yintel:core_i7-8500y_firmwareintel:core_i7-8510yintel:core_i7-8510y_firmwareintel:core_i7-8550uintel:core_i7-8550u_firmwareintel:core_i7-8557uintel:core_i7-8557u_firmwareintel:core_i7-8559uintel:core_i7-8559u_firmwareintel:core_i7-8560uintel:core_i7-8560u_firmwareintel:core_i7-8565uintel:core_i7-8565u_firmwareintel:core_i7-8569uintel:core_i7-8569u_firmwareintel:core_i7-8650uintel:core_i7-8650u_firmwareintel:core_i7-8665uintel:core_i7-8665u_firmwareintel:core_i7-8670intel:core_i7-8670_firmwareintel:core_i7-8670tintel:core_i7-8670t_firmwareintel:core_i7-8700intel:core_i7-8700_firmwareintel:core_i7-8700bintel:core_i7-8700b_firmwareintel:core_i7-8700kintel:core_i7-8700k_firmwareintel:core_i7-8700tintel:core_i7-8700t_firmwareintel:core_i7-8705gintel:core_i7-8705g_firmwareintel:core_i7-8706gintel:core_i7-8706g_firmwareintel:core_i7-8709gintel:core_i7-8709g_firmwareintel:core_i7-8750hintel:core_i7-8750h_firmwareintel:core_i7-8750hfintel:core_i7-8750hf_firmwareintel:core_i7-8809gintel:core_i7-8809g_firmwareintel:core_i7-8850hintel:core_i7-8850h_firmwareintel:core_i9-8950hkintel:core_i9-8950hk_firmwareintel:core_m3-6y30intel:core_m3-6y30_firmwareintel:core_m3-8100yintel:core_m3-8100y_firmwareintel:core_m5-6y54intel:core_m5-6y54_firmwareintel:core_m5-6y57intel:core_m5-6y57_firmwareintel:core_m7-6y75intel:core_m7-6y75_firmwarevmware:esxixen:xen

Weaknesses (CWE)

CWE-200CWE-668

References

http://www.openwall.com/lists/oss-security/2022/07/12/2(secure@intel.com)

http://www.openwall.com/lists/oss-security/2022/07/12/4(secure@intel.com)

http://www.openwall.com/lists/oss-security/2022/07/12/5(secure@intel.com)

http://www.openwall.com/lists/oss-security/2022/07/13/1(secure@intel.com)

https://comsec.ethz.ch/retbleed(secure@intel.com)

https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html(secure@intel.com)

https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html(secure@intel.com)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/(secure@intel.com)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/(secure@intel.com)

https://security.gentoo.org/glsa/202402-07(secure@intel.com)

https://security.netapp.com/advisory/ntap-20221007-0007/(secure@intel.com)

https://www.debian.org/security/2022/dsa-5207(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html(secure@intel.com)

https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/(secure@intel.com)

http://www.openwall.com/lists/oss-security/2022/07/12/2(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2022/07/12/4(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2022/07/12/5(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2022/07/13/1(af854a3a-2127-422b-91ae-364da2661108)

https://comsec.ethz.ch/retbleed(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202402-07(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20221007-0007/(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2022/dsa-5207(af854a3a-2127-422b-91ae-364da2661108)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.