medium6.5
CVE-2022-23825
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
Impact
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 11.0 |
| Fedoraproject | Fedora | Versions 35, 36 |
| Amd | Athlon X4 750 Firmware | All versions |
| Amd | Athlon X4 760k Firmware | All versions |
| Amd | Athlon X4 830 Firmware | All versions |
| Amd | Athlon X4 835 Firmware | All versions |
| Amd | Athlon X4 840 Firmware | All versions |
| Amd | Athlon X4 845 Firmware | All versions |
| Amd | Athlon X4 860k Firmware | All versions |
| Amd | Athlon X4 870k Firmware | All versions |
| Amd | Athlon X4 880k Firmware | All versions |
| Amd | Athlon X4 940 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2022/11/08/1
- http://www.openwall.com/lists/oss-security/2022/11/10/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
- https://security.gentoo.org/glsa/202402-07
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
- https://www.debian.org/security/2022/dsa-5184
- http://www.openwall.com/lists/oss-security/2022/11/08/1
- http://www.openwall.com/lists/oss-security/2022/11/10/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
- https://security.gentoo.org/glsa/202402-07
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
- https://www.debian.org/security/2022/dsa-5184