PT-2022-3604 · Intel+9 · Intel Microprocessors+9
Johannes Wikner
+1
·
Published
2022-06-27
·
Updated
2025-09-23
·
CVE-2022-29901
CVSS v3.1
6.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Intel microprocessor generations 6 through 8
Description
The issue is related to errors in processing the
ret instruction, which retrieves an address for transition from the stack. This can allow an attacker to disclose protected information from kernel memory or launch an attack on the host system from virtual machines. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.Recommendations
For Intel microprocessor generations 6 through 8, consider disabling the use of the
ret instruction in sensitive code paths until a patch is available. Restrict access to kernel memory to minimize the risk of exploitation. As a temporary workaround, apply configuration changes to mitigate the risk of arbitrary speculative code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Exposure of Resource to Wrong Sphere
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Intel Microprocessors
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu