5.5

CVE-2022-23824: amd a10-9600p_firmware

CVSS: 5.5v3.1MediumModified
AliasesALPINE-CVE-2022-23824SUSE-SU-2023:0136-1SUSE-SU-2023:0154-1
Published 09-11-2022Last modified 13-02-2025
Open JSON

Vulnerability summary

CVE-2022-23824 is a medium (CVSS 5.5) vulnerability in amd a10-9600p_firmware. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 47.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.60%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
DSA-5378-1

Timeline

  1. 09-11-2022
    PublishedVulnerability first disclosed.
  2. 13-02-2025
    Last modifiedVulnerability information updated.

Description

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.60%

Chance of exploitation in the next 30 days

Percentile

48%

Versus all other CVEs

30-day change

+0.01 pp

From 0.59% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Amd168 products
Suse25 products
  • xen&distro=SUSE Enterprise Storage 6< 4.12.4_32-150100.3.83.1
  • xen&distro=SUSE Enterprise Storage 7< 4.13.4_18-150200.3.68.1
  • xen&distro=SUSE Enterprise Storage 7.1< 4.14.5_10-150300.3.45.1
  • xen&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 4.12.4_32-150100.3.83.1
  • xen&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 4.13.4_18-150200.3.68.1
Opensuse3 products
  • xen&distro=openSUSE Leap 15.4< 4.16.3_02-150400.4.19.1
  • xen&distro=openSUSE Leap Micro 5.2< 4.14.5_10-150300.3.45.1
  • xen&distro=openSUSE Leap Micro 5.3< 4.16.3_02-150400.4.19.1
Alpine1 product
  • xen< 4.14.5-r7 | < 4.15.4-r0 | < 4.16.2-r0 | < 4.16.2-r2
Debian1 product
  • xen< 4.16.2+90-g0d39a6d1ae-1
Fedoraproject1 product
Ubuntu1 product
  • xenAll versions (No fix recorded)

7 vendors · 200 products · Showing 200 of 206. Use Open JSON for the complete list.

References

21 links
Show all 21 references