CVE-2022-29900

—

CVSS 3.1

6.5 medium

EPSS

4%p89

Published

Jul 12, 2022 (Jul 12, 2022)

Modified

Jun 17, 2026

Description

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Vendors: debian fedoraproject xen amd
Products: debian linux, fedora, xen, athlon x4 750 firmware, athlon x4 760k firmware, athlon x4 830 firmware, athlon x4 835 firmware, athlon x4 840 firmware, athlon x4 845 firmware, athlon x4 860k firmware, athlon x4 870k firmware, athlon x4 880k firmware
Weakness: CWE-212
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news2 stories

Retbleed speculative execution attack impacts both Intel and AMD

Security AffairsJul 14, 16:38 UTC · Jul 14, 2022Exploit / PoC CVE-2022-29900 CVE-2022-29901

New 'Retbleed' Speculative Execution Attack Affects AMD and Intel CPUs

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2022Vulnerability CVE-2022-29900 CVE-2022-29901 CVE-2017-5715