cve.bz

CVE-2022-29901

6.5 mediumEPSS 5.0%

Medium (6.5). EPSS 5.0% chance of exploitation in the next 30 days.

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWEs
CWE-668, CWE-200
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON