PT-2022-6459 · Amd+8 · Amd Processors+8

Daniãl Trujillo + 2 · Published 2022-07-12 · Updated 2024-09-11 · CVE-2022-23825

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AMD processors (affected versions not specified)

Description The issue is related to aliases in the branch predictor of some AMD processors, which may cause them to predict the wrong branch type. This could potentially lead to information disclosure. The vulnerability is associated with incorrect branch type prediction, allowing an attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

ALSA-2022:7110

ALSA-2022:7134

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-2363

BDU:2023-01494

CESA-2022_7110

CESA-2022_7134

CVE-2022-23825

DSA-5184-1

MGASA-2022-0278

MGASA-2022-0279

OPENSUSE-SU-2022_2597-1

OPENSUSE-SU-2022_2599-1

RHSA-2022:7110

RHSA-2022:7134

RHSA-2022:7337

RHSA-2022:7338

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022:8973

RHSA-2022:8974

RHSA-2022_7110

RHSA-2022_7134

RHSA-2022_7337

RHSA-2022_7338

RHSA-2022_7933

RHSA-2022_8267

RLSA-2022:7110

RLSA-2022:7134

SUSE-SU-2022:2557-1

SUSE-SU-2022:2560-1

SUSE-SU-2022:2569-1

SUSE-SU-2022:2574-1

SUSE-SU-2022:2591-1

SUSE-SU-2022:2597-1

SUSE-SU-2022:2599-1

SUSE-SU-2022:2599-2

SUSE-SU-2022:2600-1

SUSE-SU-2022:2601-1

Affected Products

Alt Linux

Amd Processors

Almalinux

Astra Linux

Centos

Red Hat

Red Os

Rocky Linux

Suse

References · 173

• https://osv.dev/vulnerability/SUSE-SU-2022:2599-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-23825 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-7933.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2601-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0279 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7134.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:7110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23825 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2574-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:7110 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01494 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2599-1 · Vendor Advisory