Home > Vulnerability Database > CVE-2022-29901

Mend.io Vulnerability Database

CVE-2022-29901

Date: July 12, 2022

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Severity Score

6.5

Related Resources (21)

Url: https://security.gentoo.org/glsa/202402-07

Url: https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2022-29901

Url: https://security-tracker.debian.org/tracker/CVE-2022-29901

Url: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html

Url: https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html

Url: https://access.redhat.com/security/cve/CVE-2022-29901

Url: https://comsec.ethz.ch/retbleed

Url: https://nvd.nist.gov/vuln/detail/CVE-2022-29901

Url: https://security.netapp.com/advisory/ntap-20221007-0007/

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/

Url: https://www.debian.org/security/2022/dsa-5207

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/

Url: http://www.openwall.com/lists/oss-security/2022/07/12/2

Url: http://www.openwall.com/lists/oss-security/2022/07/13/1

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/

Url: https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/

Url: http://www.openwall.com/lists/oss-security/2022/07/12/5

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/

Url: http://www.openwall.com/lists/oss-security/2022/07/12/4

Url: https://www.mend.io/vulnerability-database/CVE-2022-29901

Severity Score

6.5

Weakness Type (CWE)

Exposure of Resource to Wrong Sphere

CWE-668

Information Leak / Disclosure

CWE-200

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	1.9
Access Vector (AV):	LOCAL
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2022-29901

Date: July 12, 2022

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?