PT-2022-6330 · Intel+9 · Intel Processors+9

Alyssa Milburn + 5 · Published 2022-07-10 · Updated 2025-09-17 · CVE-2022-26373

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description The issue is related to non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors, which may allow an authorized user to potentially enable information disclosure via local access. This could be linked to errors in handling the RET instruction after virtual machine exit, potentially allowing an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2022:7444

ALSA-2022:7683

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-2512

BDU:2023-00942

CESA-2022_7444

CESA-2022_7683

CVE-2022-26373

DLA-3102-1

DLA-3131-1

DSA-5207-1

MGASA-2022-0305

MGASA-2022-0308

OESA-2022-1864

OESA-2022-1871

OESA-2022-1942

OPENSUSE-SU-2022_2803-1

OPENSUSE-SU-2022_3264-1

OPENSUSE-SU-2022_3288-1

OPENSUSE-SU-2022_3408-1

OPENSUSE-SU-2022_3609-1

OPENSUSE-SU-2022_4617-1

RHSA-2022:7337

RHSA-2022:7338

RHSA-2022:7444

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022:8973

RHSA-2022:8974

RHSA-2022_7337

RHSA-2022_7338

RHSA-2022_7444

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

RHSA-2023:0440

RLSA-2022:7444

RLSA-2022:7683

SUSE-SU-2022:2803-1

SUSE-SU-2022:3263-1

SUSE-SU-2022:3264-1

SUSE-SU-2022:3265-1

SUSE-SU-2022:3274-1

SUSE-SU-2022:3282-1

SUSE-SU-2022:3288-1

SUSE-SU-2022:3291-1

SUSE-SU-2022:3294-1

SUSE-SU-2022:3408-1

SUSE-SU-2022:3422-1

SUSE-SU-2022:3450-1

SUSE-SU-2022:3609-1

SUSE-SU-2022:3809-1

SUSE-SU-2022:4617-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1293-1

USN-5667-1

USN-5668-1

USN-5677-1

USN-5682-1

USN-5683-1

USN-5703-1

USN-5706-1

USN-5854-1

USN-5861-1

USN-5862-1

USN-5865-1

USN-5883-1

USN-5924-1

USN-5975-1

USN-6007-1

USN-6221-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Intel Processors

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1321

• https://ubuntu.com/security/CVE-2022-33740 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3274-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5854-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20369 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-26373 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4378 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5862-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3521 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3264-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1942 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3263-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26373 · Security Note
• https://ubuntu.com/security/CVE-2023-0045 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33741 · Vendor Advisory