CVE-2022-29901: Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
Vulnerability summary
CVE-2022-29901 is a medium (CVSS 6.5) vulnerability in debian debian_linux. EPSS estimates a 5.01% chance of exploitation in the next 30 days, higher than 92.2% of scored vulnerabilities.
Not severe (CVSS 5.6, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 56 · Related 43Timeline
- 12-07-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.
CVSS metrics
6 scores · 4 sources · 3 versions- CVE.orgCNA5.6MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated5.6MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NDiffers
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS trend
Probability
5.01%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 5.01% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-668Exposure of Resource to Wrong SphereThe product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Intel115 products
- core_i3-6100_firmwarena
- core_i3-6100e_firmwarena
- core_i3-6100h_firmwarena
- core_i3-6100t_firmwarena
- core_i3-6100te_firmwarena
Ubuntu82 products
- linuxAll versions (No fix recorded) | < 4.4.0-242.276 | < 4.15.0-204.215 | < 5.4.0-132.148 | < 5.15.0-46.49
- linux-aws< 4.4.0-1120.126 | < 4.4.0-1158.173 | < 4.15.0-1150.163 | < 5.4.0-1089.97 | < 5.15.0-1017.21
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
Debian2 products
- linux< 5.18.14-1
- debian_linuxEOL10.0 | 11.0
Fedoraproject1 product
- fedoraEOL35 | 36
4 vendors · 200 products · Showing 200 of 213
References
37 links- www.openwall.com/lists/oss-security/2022/07/12/2Mailing List
- www.openwall.com/lists/oss-security/2022/07/12/4Mailing List
- www.openwall.com/lists/oss-security/2022/07/12/5Mailing List
- www.openwall.com/lists/oss-security/2022/07/13/1Mailing List
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
www.debian.org/security/2022/dsa-5207Vendor Advisory
Show all 37 references
- security.gentoo.org/glsa/202402-07Vendor Advisory
- www.intel.com/content/…REPORT
- community.intel.com/t5/…REPORT
- www.intel.com/content/…REPORT