Vulnerability · Published Jul 12, 2022 · Assigned by intel
CVE-2022-29901Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
Medium 5.6
In plain English
A medium-severity information exposure in Intel Microprocessors from Intel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.0% (higher than 92% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.6Medium
Exploit odds (30 days)5.0%top 7.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | bpftool | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-core | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-devel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-doc | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-doc | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-headers | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-headers | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-modules | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-rt | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-kvm | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-tools | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-tools | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | perf | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | perf | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | python3-perf | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
| AlmaLinux:9 | python3-perf | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| Debian:12 | linux | 5.18.14-1 | DEBIAN-CVE-2022-29901 |
| Debian:13 | linux | 5.18.14-1 | DEBIAN-CVE-2022-29901 |
| Debian:14 | linux | 5.18.14-1 | DEBIAN-CVE-2022-29901 |
| Rocky Linux:8 | kernel | 0:4.18.0-372.32.1.el8_6 | RLSA-2022:7110 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-372.32.1.rt7.189.el8_6 | RLSA-2022:7134 |
| Ubuntu:22.04:LTS | linux | 5.15.0-46.49 | USN-5565-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-46.49 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1017.21 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1017.21 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1017.20 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1017.20 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1016.21 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1016.21 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1014.17 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1014.17 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1002.4 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1012.14 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1012.14 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1013.17 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1013.17 | USN-5564-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1016.19 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1016.19 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-46.49 | USN-5565-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-46.49 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1016.20 | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1016.20 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1013.15 | USN-5566-1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1013.15 | UBUNTU-CVE-2022-29901 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2022-29901 |
| Ubuntu:22.04:LTS | linux-riscv | 5.15.0-1017.19 | UBUNTU-CVE-2022-29901 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Intel | Intel Microprocessors | generations 6 to 8 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
References
- https://comsec.ethz.ch/retbleed
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html
- [oss-security] 20220712 Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions mailing-list
- [oss-security] 20220712 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions mailing-list
- [oss-security] 20220712 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions mailing-list
- [oss-security] 20220713 Re: Xen Security Advisory 407 v1 (CVE-2022-23816,CVE-2022-23825,CVE-2022-29900) - Retbleed - arbitrary speculative code execution with return instructions mailing-list
- FEDORA-2022-c69ef9c1dd vendor-advisory
- FEDORA-2022-8aab5b5cde vendor-advisory
- DSA-5207 vendor-advisory
- [debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new package mailing-list
- https://security.netapp.com/advisory/ntap-20221007-0007/
- [debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update mailing-list
- https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/
- GLSA-202402-07 vendor-advisory