Vulnerability-Lookup

RHSA-2022:7337

Vulnerability from csaf_opensuse - Published: 2022-11-02 00:00 - Updated: 2026-09-20 11:23

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2022:7337. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2022:7337.

Patchnames: RHSA-2022:7337

CVE-2022-23816

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 13 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2022-23825

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2022-23816

Threats

Impact moderate

CVE-2022-2588

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2022-23816

Threats

Impact important

CVE-2022-26373

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2022-23816

Threats

Impact moderate

CVE-2022-29900

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2022-23816

Threats

Impact moderate

CVE-2022-29901

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2022-23816

Threats

Impact moderate

References

31 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2022-23816/	self
https://www.suse.com/security/cve/CVE-2022-23825/	self
https://www.suse.com/security/cve/CVE-2022-2588/	self
https://www.suse.com/security/cve/CVE-2022-26373/	self
https://www.suse.com/security/cve/CVE-2022-29900/	self
https://www.suse.com/security/cve/CVE-2022-29901/	self
https://www.suse.com/security/cve/CVE-2022-23816	external
https://bugzilla.suse.com/1201456	external
https://bugzilla.suse.com/1201469	external
https://www.suse.com/security/cve/CVE-2022-23825	external
https://bugzilla.suse.com/1201457	external
https://bugzilla.suse.com/1201469	external
https://bugzilla.suse.com/1205209	external
https://www.suse.com/security/cve/CVE-2022-2588	external
https://bugzilla.suse.com/1202096	external
https://bugzilla.suse.com/1203613	external
https://bugzilla.suse.com/1204183	external
https://bugzilla.suse.com/1209225	external
https://www.suse.com/security/cve/CVE-2022-26373	external
https://bugzilla.suse.com/1201726	external
https://bugzilla.suse.com/1209619	external
https://www.suse.com/security/cve/CVE-2022-29900	external
https://bugzilla.suse.com/1199657	external
https://bugzilla.suse.com/1201469	external
https://bugzilla.suse.com/1207894	external
https://www.suse.com/security/cve/CVE-2022-29901	external
https://bugzilla.suse.com/1199657	external
https://bugzilla.suse.com/1201469	external
https://bugzilla.suse.com/1207894	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2022:7337.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:7337.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2022:7337",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_7337.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23816 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23816/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23825 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23825/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-2588 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-2588/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-26373 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-26373/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-29900 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-29900/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-29901 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-29901/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:23:43Z",
      "generator": {
        "date": "2022-11-02T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2022:7337",
      "initial_release_date": "2022-11-02T00:00:00Z",
      "revision_history": [
        {
          "date": "2022-11-02T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:23:43Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.80.1.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.80.1.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "bpftool-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "bpftool-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@3.10.0-1160.80.1.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.80.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-1160.80.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.80.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.80.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.80.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.80.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.80.1.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.80.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.80.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.80.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.80.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.80.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "perf-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-1160.80.1.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.80.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-1160.80.1.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-1160.80.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-1160.80.1.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "bpftool-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-1160.80.1.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-1160.80.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-1160.80.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-23816",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23816"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23816",
          "url": "https://www.suse.com/security/cve/CVE-2022-23816"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201456 for CVE-2022-23816",
          "url": "https://bugzilla.suse.com/1201456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201469 for CVE-2022-23816",
          "url": "https://bugzilla.suse.com/1201469"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-11-02T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-23816"
    },
    {
      "cve": "CVE-2022-23825",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23825"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23825",
          "url": "https://www.suse.com/security/cve/CVE-2022-23825"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201457 for CVE-2022-23825",
          "url": "https://bugzilla.suse.com/1201457"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201469 for CVE-2022-23825",
          "url": "https://bugzilla.suse.com/1201469"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1205209 for CVE-2022-23825",
          "url": "https://bugzilla.suse.com/1205209"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-11-02T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-23825"
    },
    {
      "cve": "CVE-2022-2588",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-2588"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-2588",
          "url": "https://www.suse.com/security/cve/CVE-2022-2588"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202096 for CVE-2022-2588",
          "url": "https://bugzilla.suse.com/1202096"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203613 for CVE-2022-2588",
          "url": "https://bugzilla.suse.com/1203613"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1204183 for CVE-2022-2588",
          "url": "https://bugzilla.suse.com/1204183"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209225 for CVE-2022-2588",
          "url": "https://bugzilla.suse.com/1209225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-11-02T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-2588"
    },
    {
      "cve": "CVE-2022-26373",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-26373"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-26373",
          "url": "https://www.suse.com/security/cve/CVE-2022-26373"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201726 for CVE-2022-26373",
          "url": "https://bugzilla.suse.com/1201726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209619 for CVE-2022-26373",
          "url": "https://bugzilla.suse.com/1209619"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-11-02T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-26373"
    },
    {
      "cve": "CVE-2022-29900",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-29900"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-29900",
          "url": "https://www.suse.com/security/cve/CVE-2022-29900"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199657 for CVE-2022-29900",
          "url": "https://bugzilla.suse.com/1199657"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201469 for CVE-2022-29900",
          "url": "https://bugzilla.suse.com/1201469"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1207894 for CVE-2022-29900",
          "url": "https://bugzilla.suse.com/1207894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-11-02T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-29900"
    },
    {
      "cve": "CVE-2022-29901",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-29901"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-29901",
          "url": "https://www.suse.com/security/cve/CVE-2022-29901"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199657 for CVE-2022-29901",
          "url": "https://bugzilla.suse.com/1199657"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201469 for CVE-2022-29901",
          "url": "https://bugzilla.suse.com/1201469"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1207894 for CVE-2022-29901",
          "url": "https://bugzilla.suse.com/1207894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.80.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.80.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.80.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-11-02T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-29901"
    }
  ]
}

CVE-2022-23816 (GCVE-0-2022-23816)

Vulnerability from cvelistv5 – Published: – Updated: 2023-01-17 00:00

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2022-23816",
    "dateRejected": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-01-21T00:00:00.000Z",
    "dateUpdated": "2023-01-17T00:00:00.000Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2022-23825 (GCVE-0-2022-23825)

Vulnerability from cvelistv5 – Published: 2022-07-14 19:27 – Updated: 2024-09-16 17:48

Summary

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.

Severity

No CVSS data available.

CWE

Assigner

AMD mitre root

References

9 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.amd.com/en/corporate/product-security…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2022/dsa-5184	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
http://www.openwall.com/lists/oss-security/2022/11/08/1	mailing-list
http://www.openwall.com/lists/oss-security/2022/11/10/2	mailing-list
https://security.gentoo.org/glsa/202402-07	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
AMD	AMD Processors	Affected: Processor Some AMD Processors

Date Public

2022-07-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:46.140Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2022-c69ef9c1dd",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037"
          },
          {
            "name": "FEDORA-2022-8aab5b5cde",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/"
          },
          {
            "name": "DSA-5184",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5184"
          },
          {
            "name": "FEDORA-2022-3e6ce58029",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/"
          },
          {
            "name": "FEDORA-2022-a0d7a5eaf2",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/"
          },
          {
            "name": "[oss-security] 20221108 Xen Security Advisory 422 v1 (CVE-2022-23824) - x86: Multiple speculative security issues",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/11/08/1"
          },
          {
            "name": "[oss-security] 20221110 Xen Security Advisory 422 v2 (CVE-2022-23824) - x86: Multiple speculative security issues",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/11/10/2"
          },
          {
            "name": "GLSA-202402-07",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202402-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "AMD Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Processor  Some AMD Processors"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "NA",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-04T08:06:51.356Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "name": "FEDORA-2022-c69ef9c1dd",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/"
        },
        {
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037"
        },
        {
          "name": "FEDORA-2022-8aab5b5cde",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/"
        },
        {
          "name": "DSA-5184",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5184"
        },
        {
          "name": "FEDORA-2022-3e6ce58029",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/"
        },
        {
          "name": "FEDORA-2022-a0d7a5eaf2",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/"
        },
        {
          "name": "[oss-security] 20221108 Xen Security Advisory 422 v1 (CVE-2022-23824) - x86: Multiple speculative security issues",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/11/08/1"
        },
        {
          "name": "[oss-security] 20221110 Xen Security Advisory 422 v2 (CVE-2022-23824) - x86: Multiple speculative security issues",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/11/10/2"
        },
        {
          "name": "GLSA-202402-07",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202402-07"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2022-23825",
    "datePublished": "2022-07-14T19:27:08.292Z",
    "dateReserved": "2022-01-21T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:48:09.000Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2588 (GCVE-0-2022-2588)

Vulnerability from cvelistv5 – Published: 2024-01-08 17:50 – Updated: 2025-05-22 18:23

Summary

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-06 20:44 UTC

CWE

CWE-416

Assigner

canonical mitre root

References

15 references

URL	Tags
https://ubuntu.com/security/notices/USN-5565-1	third-party-advisory
https://ubuntu.com/security/notices/USN-5562-1	third-party-advisory
https://www.openwall.com/lists/oss-security/2022/…	issue-tracking
https://ubuntu.com/security/notices/USN-5582-1	third-party-advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CV…	issue-tracking
https://ubuntu.com/security/notices/USN-5564-1	third-party-advisory
https://ubuntu.com/security/notices/USN-5566-1	third-party-advisory
https://www.zerodayinitiative.com/advisories/ZDI-…	issue-tracking
https://ubuntu.com/security/notices/USN-5588-1	third-party-advisory
https://ubuntu.com/security/notices/USN-5560-1	third-party-advisory
https://github.com/Markakd/CVE-2022-2588	issue-tracking
https://ubuntu.com/security/notices/USN-5567-1	third-party-advisory
https://ubuntu.com/security/notices/USN-5560-2	third-party-advisory
https://lore.kernel.org/netdev/20220809170518.164…	issue-tracking
https://ubuntu.com/security/notices/USN-5557-1	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
The Linux Kernel Organization	linux	Affected: 0 , < 6.0~rc1 (semver)

Credits

Zhenpeng Lin working with Trend Micro's Zero Day Initiative

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:39:08.044Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5565-1"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5562-1"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2022/08/09/6"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5582-1"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5564-1"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5566-1"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1117/"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5588-1"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5560-1"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://github.com/Markakd/CVE-2022-2588"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5567-1"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5560-2"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u"
          },
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/notices/USN-5557-1"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-2588",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-06T20:44:16.386267Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-22T18:23:25.184Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "packageName": "linux",
          "platforms": [
            "Linux"
          ],
          "product": "linux",
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git",
          "vendor": "The Linux Kernel Organization",
          "versions": [
            {
              "lessThan": "6.0~rc1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Zhenpeng Lin working with Trend Micro\u0027s Zero Day Initiative"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-08T17:50:47.948Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5565-1"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5562-1"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2022/08/09/6"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5582-1"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5564-1"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5566-1"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1117/"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5588-1"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5560-1"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/Markakd/CVE-2022-2588"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5567-1"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5560-2"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ubuntu.com/security/notices/USN-5557-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2022-2588",
    "datePublished": "2024-01-08T17:50:47.948Z",
    "dateReserved": "2022-07-29T23:41:31.412Z",
    "dateUpdated": "2025-05-22T18:23:25.184Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-26373 (GCVE-0-2022-26373)

Vulnerability from cvelistv5 – Published: 2022-08-18 00:00 – Updated: 2025-05-05 16:22

Summary

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:20 UTC

CWE

information disclosure
CWE-noinfo Not enough information

Assigner

intel mitre root

References

4 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.netapp.com/advisory/ntap-2022100…

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:32.895Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00706.html"
          },
          {
            "name": "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221007-0005/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-26373",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:20:22.737694Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T16:22:27.550Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-07T00:00:00.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00706.html"
        },
        {
          "name": "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221007-0005/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2022-26373",
    "datePublished": "2022-08-18T00:00:00.000Z",
    "dateReserved": "2022-05-11T00:00:00.000Z",
    "dateUpdated": "2025-05-05T16:22:27.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-28693 (GCVE-0-2022-28693)

Vulnerability from cvelistv5 – Published: 2025-02-14 20:50 – Updated: 2025-02-14 20:55

Summary

Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-14 20:54 UTC

CWE

Information Disclosure
CWE-420 - Unprotected Alternate Channel

Assigner

intel mitre root

References

1 reference

URL	Tags
https://intel.com/content/www/us/en/security-cent…

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-28693",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-14T20:54:47.537705Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-14T20:55:26.699Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en"
            },
            {
              "cweId": "CWE-420",
              "description": "Unprotected Alternate Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-14T20:50:54.450Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2022-28693",
    "datePublished": "2025-02-14T20:50:54.450Z",
    "dateReserved": "2022-05-11T04:17:14.573Z",
    "dateUpdated": "2025-02-14T20:55:26.699Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-29900 (GCVE-0-2022-29900)

Vulnerability from cvelistv5 – Published: 2022-07-12 15:50 – Updated: 2024-11-20 16:13

Summary

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-20 16:09 UTC

CWE

Assigner

AMD mitre root

References

6 references

URL	Tags
https://www.amd.com/en/corporate/product-security…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2022/dsa-5207	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://www.secpod.com/blog/retbleed-intel-and-am…
https://security.gentoo.org/glsa/202402-07	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
AMD	AMD Processors	Affected: Processor Some AMD Processors

Date Public

2022-07-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:33:43.145Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037"
          },
          {
            "name": "FEDORA-2022-a0d7a5eaf2",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/"
          },
          {
            "name": "DSA-5207",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5207"
          },
          {
            "name": "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/"
          },
          {
            "name": "GLSA-202402-07",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202402-07"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-29900",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-20T16:09:18.710200Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T16:13:31.449Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "AMD Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Processor  Some AMD Processors"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "NA",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-04T08:06:53.374Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037"
        },
        {
          "name": "FEDORA-2022-a0d7a5eaf2",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/"
        },
        {
          "name": "DSA-5207",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5207"
        },
        {
          "name": "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html"
        },
        {
          "url": "https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/"
        },
        {
          "name": "GLSA-202402-07",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202402-07"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2022-29900",
    "datePublished": "2022-07-12T15:50:10.585Z",
    "dateReserved": "2022-04-28T00:00:00.000Z",
    "dateUpdated": "2024-11-20T16:13:31.449Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-29901 (GCVE-0-2022-29901)

Vulnerability from cvelistv5 – Published: 2022-07-12 00:00 – Updated: 2024-08-03 06:33

Title

Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

Summary

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-200 - Information Exposure

Assigner

intel mitre root

References

14 references

URL	Tags
https://comsec.ethz.ch/retbleed
https://www.intel.com/content/www/us/en/security-…
http://www.openwall.com/lists/oss-security/2022/07/12/2	mailing-list
http://www.openwall.com/lists/oss-security/2022/07/12/4	mailing-list
http://www.openwall.com/lists/oss-security/2022/07/12/5	mailing-list
http://www.openwall.com/lists/oss-security/2022/07/13/1	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2022/dsa-5207	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.netapp.com/advisory/ntap-2022100…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://www.secpod.com/blog/retbleed-intel-and-am…
https://security.gentoo.org/glsa/202402-07	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Intel	Intel Microprocessors	Affected: generations 6 to 8

Credits

Johannes Wikner - ETH Zürich Kaveh Razavi - ETH Zürich

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:33:43.000Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://comsec.ethz.ch/retbleed"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html"
          },
          {
            "name": "[oss-security] 20220712 Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/07/12/2"
          },
          {
            "name": "[oss-security] 20220712 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/07/12/4"
          },
          {
            "name": "[oss-security] 20220712 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/07/12/5"
          },
          {
            "name": "[oss-security] 20220713 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/07/13/1"
          },
          {
            "name": "FEDORA-2022-c69ef9c1dd",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/"
          },
          {
            "name": "FEDORA-2022-8aab5b5cde",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/"
          },
          {
            "name": "DSA-5207",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5207"
          },
          {
            "name": "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221007-0007/"
          },
          {
            "name": "[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/"
          },
          {
            "name": "GLSA-202402-07",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202402-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel Microprocessors",
          "vendor": "Intel",
          "versions": [
            {
              "status": "affected",
              "version": "generations 6 to 8"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Johannes Wikner - ETH Z\u00fcrich"
        },
        {
          "lang": "en",
          "value": "Kaveh Razavi - ETH Z\u00fcrich"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Information Exposure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-04T08:06:41.365Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "url": "https://comsec.ethz.ch/retbleed"
        },
        {
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html"
        },
        {
          "name": "[oss-security] 20220712 Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/07/12/2"
        },
        {
          "name": "[oss-security] 20220712 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/07/12/4"
        },
        {
          "name": "[oss-security] 20220712 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/07/12/5"
        },
        {
          "name": "[oss-security] 20220713 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/07/13/1"
        },
        {
          "name": "FEDORA-2022-c69ef9c1dd",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/"
        },
        {
          "name": "FEDORA-2022-8aab5b5cde",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/"
        },
        {
          "name": "DSA-5207",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5207"
        },
        {
          "name": "[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221007-0007/"
        },
        {
          "name": "[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
        },
        {
          "url": "https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/"
        },
        {
          "name": "GLSA-202402-07",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202402-07"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2022-29901",
    "datePublished": "2022-07-12T00:00:00.000Z",
    "dateReserved": "2022-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-03T06:33:43.000Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2022:7337

CVE-2022-23816 (GCVE-0-2022-23816)

CVE-2022-23825 (GCVE-0-2022-23825)

CVE-2022-2588 (GCVE-0-2022-2588)

CVE-2022-26373 (GCVE-0-2022-26373)

CVE-2022-28693 (GCVE-0-2022-28693)

CVE-2022-29900 (GCVE-0-2022-29900)

CVE-2022-29901 (GCVE-0-2022-29901)

Tags

Sightings

Nomenclature

Related by attack behaviour