Vulnerability · Published Jul 14, 2022 · Assigned by AMD
CVE-2022-23825
Medium 6.5
In plain English
A medium-severity security flaw in AMD Processors from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.8%top 43.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | bpftool | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-core | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-devel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-doc | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-doc | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-headers | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-headers | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-modules | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-rt | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-kvm | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-tools | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-tools | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | perf | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | perf | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | python3-perf | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | python3-perf | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| Alpine:v3.20 | xen | 4.16.1-r5 | ALPINE-CVE-2022-23825 |
| Alpine:v3.21 | xen | 4.16.1-r5 | ALPINE-CVE-2022-23825 |
| Alpine:v3.22 | xen | 4.16.1-r5 | ALPINE-CVE-2022-23825 |
| Alpine:v3.23 | xen | 4.16.1-r5 | ALPINE-CVE-2022-23825 |
| Alpine:v3.24 | xen | 4.16.1-r5 | ALPINE-CVE-2022-23825 |
| Debian:12 | xen | 4.16.2-1 | DEBIAN-CVE-2022-23825 |
| Debian:13 | xen | 4.16.2-1 | DEBIAN-CVE-2022-23825 |
| Debian:14 | xen | 4.16.2-1 | DEBIAN-CVE-2022-23825 |
| Rocky Linux:8 | kernel | 0:4.18.0-372.32.1.el8_6 | RLSA-2022:7110 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-372.32.1.rt7.189.el8_6 | RLSA-2022:7134 |
| Ubuntu:22.04:LTS | linux | 5.15.0-46.49 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1017.21 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1017.20 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1016.21 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1014.17 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1002.4 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1012.14 | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-intel | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1013.17 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1016.19 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-46.49 | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1016.20 | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1013.15 | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2022-23825 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2022-23825 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | AMD Processors | Processor Some AMD Processors |
References
- FEDORA-2022-c69ef9c1dd vendor-advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
- FEDORA-2022-8aab5b5cde vendor-advisory
- DSA-5184 vendor-advisory
- FEDORA-2022-3e6ce58029 vendor-advisory
- FEDORA-2022-a0d7a5eaf2 vendor-advisory
- [oss-security] 20221108 Xen Security Advisory 422 v1 (CVE-2022-23824) - x86: Multiple speculative security issues mailing-list
- [oss-security] 20221110 Xen Security Advisory 422 v2 (CVE-2022-23824) - x86: Multiple speculative security issues mailing-list
- GLSA-202402-07 vendor-advisory