{"id":"CVE-2022-23824","aliases":["ALPINE-CVE-2022-23824","DEBIAN-CVE-2022-23824","DSA-5378-1","EUVD-2022-28753","GHSA-hhhj-6x4j-w995","SUSE-SU-2023:0136-1","SUSE-SU-2023:0154-1","SUSE-SU-2023:0169-1","SUSE-SU-2023:0170-1","SUSE-SU-2023:0186-1","SUSE-SU-2023:0214-1","SUSE-SU-2023:0672-1","UBUNTU-CVE-2022-23824"],"status":"published","title":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00621,"percentile":0.50213,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-11-09T20:48:06Z","modified":"2026-11-03T08:02:05Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"xen","fixed_in":["4.14.5-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"xen","fixed_in":["4.15.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"xen","fixed_in":["4.15.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xen","fixed_in":["4.16.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xen","fixed_in":["4.16.2-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.16.2+90-g0d39a6d1ae-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.16.2+90-g0d39a6d1ae-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.16.2+90-g0d39a6d1ae-1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"xen","fixed_in":["4.11.4_36-2.86.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"xen","fixed_in":["4.11.4_36-2.86.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"xen","fixed_in":["4.11.4_36-2.86.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"xen","fixed_in":["4.11.4_36-2.86.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"xen","fixed_in":["4.12.4_32-150100.3.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"xen","fixed_in":["4.12.4_32-150100.3.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"xen","fixed_in":["4.12.4_32-150100.3.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"xen","fixed_in":["4.12.4_32-150100.3.83.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"xen","fixed_in":["4.16.3_02-150400.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"xen","fixed_in":["4.16.3_02-150400.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"xen","fixed_in":["4.16.3_02-150400.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"xen","fixed_in":["4.16.3_02-150400.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"xen","fixed_in":["4.16.3_02-150400.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"xen","fixed_in":["4.14.5_10-150300.3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"xen","fixed_in":["4.7.6_30-43.101.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xen","fixed_in":["4.13.4_18-150200.3.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xen","fixed_in":["4.13.4_18-150200.3.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xen","fixed_in":["4.13.4_18-150200.3.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"xen","fixed_in":["4.13.4_18-150200.3.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"xen","fixed_in":["4.12.4_32-3.85.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xen","fixed_in":["4.12.4_32-3.85.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xen","fixed_in":["4.12.4_32-3.85.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2+90-g0d39a6d1ae-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2+90-g0d39a6d1ae-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.2+90-g0d39a6d1ae-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5+94-ge49571868d-1"}]}],"versions":["4.14.2+25-gb6a8c4f72d-2","4.14.3+32-g9de3671772-1","4.14.3+32-g9de3671772-1~deb11u1","4.14.3-1","4.14.3-1~deb11u1","4.14.4+74-gd7b22226b5-1","4.14.5+24-g87d90d511c-1","4.14.5+86-g1c354767d5-1"],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_36-2.86.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_36-2.86.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_36-2.86.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_36-2.86.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-150100.3.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-150100.3.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-150100.3.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-150100.3.83.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.3_02-150400.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.3_02-150400.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.3_02-150400.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.3_02-150400.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.3_02-150400.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5_10-150300.3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_30-43.101.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_18-150200.3.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_18-150200.3.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_18-150200.3.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_18-150200.3.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-3.85.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-3.85.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_32-3.85.4"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1-0ubuntu1","4.5.1-0ubuntu2","4.6.0-1ubuntu1","4.6.0-1ubuntu2","4.6.0-1ubuntu4","4.6.0-1ubuntu4.1","4.6.0-1ubuntu4.2","4.6.0-1ubuntu4.3","4.6.5-0ubuntu1","4.6.5-0ubuntu1.1","4.6.5-0ubuntu1.2","4.6.5-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.0-0ubuntu3","4.9.0-0ubuntu4","4.9.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.2-0ubuntu2","4.9.2-0ubuntu6","4.9.2-0ubuntu7","4.11.3+24-g14b62ab3e5-1ubuntu1","4.11.3+24-g14b62ab3e5-1ubuntu2","4.11.3+24-g14b62ab3e5-1ubuntu2.2","4.11.3+24-g14b62ab3e5-1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.4+24-gddaaccbbab-1ubuntu2","4.16.0-1~ubuntu2","4.16.0-1~ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.17.2-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1ubuntu1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1ubuntu2","4.17.3+10-g091466ba55-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.0-1ubuntu1","4.20.0+68-g35cb38b222-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.2+7-g1badcf5035-2build2","4.20.2+37-g61ff35323e-1ubuntu1","4.20.3+127-gc42374a105-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+7-g1badcf5035-2","4.20.2+7-g1badcf5035-2build2"]}],"products":[{"vendor":"amd","product":"a10-9600p_firmware"},{"vendor":"amd","product":"a10-9630p_firmware"},{"vendor":"amd","product":"a12-9700p_firmware"},{"vendor":"amd","product":"a12-9730p_firmware"},{"vendor":"amd","product":"a4-9120_firmware"},{"vendor":"amd","product":"a6-9210_firmware"},{"vendor":"amd","product":"a6-9220_firmware"},{"vendor":"amd","product":"a6-9220c_firmware"},{"vendor":"amd","product":"a9-9410_firmware"},{"vendor":"amd","product":"a9-9420_firmware"},{"vendor":"amd","product":"amd processors"},{"vendor":"amd","product":"athlon_gold_3150u_firmware"},{"vendor":"amd","product":"athlon_silver_3050u_firmware"},{"vendor":"amd","product":"athlon_x4_750_firmware"},{"vendor":"amd","product":"athlon_x4_760k_firmware"},{"vendor":"amd","product":"athlon_x4_830_firmware"},{"vendor":"amd","product":"athlon_x4_835_firmware"},{"vendor":"amd","product":"athlon_x4_840_firmware"},{"vendor":"amd","product":"athlon_x4_845_firmware"},{"vendor":"amd","product":"athlon_x4_860k_firmware"},{"vendor":"amd","product":"athlon_x4_870k_firmware"},{"vendor":"amd","product":"athlon_x4_880k_firmware"},{"vendor":"amd","product":"athlon_x4_940_firmware"},{"vendor":"amd","product":"athlon_x4_950_firmware"},{"vendor":"amd","product":"athlon_x4_970_firmware"},{"vendor":"amd","product":"epyc_7001_firmware"},{"vendor":"amd","product":"epyc_7002_firmware"},{"vendor":"amd","product":"epyc_7003_firmware"},{"vendor":"amd","product":"epyc_7251_firmware"},{"vendor":"amd","product":"epyc_7252_firmware"},{"vendor":"amd","product":"epyc_7261_firmware"},{"vendor":"amd","product":"epyc_7262_firmware"},{"vendor":"amd","product":"epyc_7272_firmware"},{"vendor":"amd","product":"epyc_7281_firmware"},{"vendor":"amd","product":"epyc_7282_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7301_firmware"},{"vendor":"amd","product":"epyc_7302_firmware"},{"vendor":"amd","product":"epyc_7302p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7351_firmware"},{"vendor":"amd","product":"epyc_7351p_firmware"},{"vendor":"amd","product":"epyc_7352_firmware"},{"vendor":"amd","product":"epyc_7371_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_7401_firmware"},{"vendor":"amd","product":"epyc_7401p_firmware"},{"vendor":"amd","product":"epyc_7402_firmware"},{"vendor":"amd","product":"epyc_7402p_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7451_firmware"},{"vendor":"amd","product":"epyc_7452_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7501_firmware"},{"vendor":"amd","product":"epyc_7502_firmware"},{"vendor":"amd","product":"epyc_7502p_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7532_firmware"},{"vendor":"amd","product":"epyc_7542_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7551_firmware"},{"vendor":"amd","product":"epyc_7551p_firmware"},{"vendor":"amd","product":"epyc_7552_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7601_firmware"},{"vendor":"amd","product":"epyc_7642_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7662_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7702_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7742_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_7f32_firmware"},{"vendor":"amd","product":"epyc_7f52_firmware"},{"vendor":"amd","product":"epyc_7f72_firmware"},{"vendor":"amd","product":"epyc_7h12_firmware"},{"vendor":"amd","product":"ryzen_3_2200u_firmware"},{"vendor":"amd","product":"ryzen_3_2300u_firmware"},{"vendor":"amd","product":"ryzen_3_3100_firmware"},{"vendor":"amd","product":"ryzen_3_3200u_firmware"},{"vendor":"amd","product":"ryzen_3_3250u_firmware"},{"vendor":"amd","product":"ryzen_3_3300g_firmware"},{"vendor":"amd","product":"ryzen_3_3300u_firmware"},{"vendor":"amd","product":"ryzen_3_3300x_firmware"},{"vendor":"amd","product":"ryzen_3_4300g_firmware"},{"vendor":"amd","product":"ryzen_3_4300ge_firmware"},{"vendor":"amd","product":"ryzen_3_4300u_firmware"},{"vendor":"amd","product":"ryzen_3_5125c_firmware"},{"vendor":"amd","product":"ryzen_3_5400u_firmware"},{"vendor":"amd","product":"ryzen_3_5425c_firmware"},{"vendor":"amd","product":"ryzen_3_5425u_firmware"},{"vendor":"amd","product":"ryzen_5_2500u_firmware"},{"vendor":"amd","product":"ryzen_5_2600_firmware"},{"vendor":"amd","product":"ryzen_5_2600h_firmware"},{"vendor":"amd","product":"ryzen_5_2600x_firmware"},{"vendor":"amd","product":"ryzen_5_2700_firmware"},{"vendor":"amd","product":"ryzen_5_2700x_firmware"},{"vendor":"amd","product":"ryzen_5_3400g_firmware"},{"vendor":"amd","product":"ryzen_5_3450g_firmware"},{"vendor":"amd","product":"ryzen_5_3500u_firmware"},{"vendor":"amd","product":"ryzen_5_3550h_firmware"},{"vendor":"amd","product":"ryzen_5_3580u_firmware"},{"vendor":"amd","product":"ryzen_5_3600_firmware"},{"vendor":"amd","product":"ryzen_5_3600x_firmware"},{"vendor":"amd","product":"ryzen_5_3600xt_firmware"},{"vendor":"amd","product":"ryzen_5_4500u_firmware"},{"vendor":"amd","product":"ryzen_5_4600g_firmware"},{"vendor":"amd","product":"ryzen_5_4600ge_firmware"},{"vendor":"amd","product":"ryzen_5_4600h_firmware"},{"vendor":"amd","product":"ryzen_5_4600u_firmware"},{"vendor":"amd","product":"ryzen_5_5560u_firmware"},{"vendor":"amd","product":"ryzen_5_5600h_firmware"},{"vendor":"amd","product":"ryzen_5_5600hs_firmware"},{"vendor":"amd","product":"ryzen_5_5600u_firmware"},{"vendor":"amd","product":"ryzen_5_5625c_firmware"},{"vendor":"amd","product":"ryzen_5_5625u_firmware"},{"vendor":"amd","product":"ryzen_7_2700_firmware"},{"vendor":"amd","product":"ryzen_7_2700u_firmware"},{"vendor":"amd","product":"ryzen_7_2700x_firmware"},{"vendor":"amd","product":"ryzen_7_2800h_firmware"},{"vendor":"amd","product":"ryzen_7_3700u_firmware"},{"vendor":"amd","product":"ryzen_7_3700x_firmware"},{"vendor":"amd","product":"ryzen_7_3750h_firmware"},{"vendor":"amd","product":"ryzen_7_3780u_firmware"},{"vendor":"amd","product":"ryzen_7_3800x_firmware"},{"vendor":"amd","product":"ryzen_7_3800xt_firmware"},{"vendor":"amd","product":"ryzen_7_4700g_firmware"},{"vendor":"amd","product":"ryzen_7_4700ge_firmware"},{"vendor":"amd","product":"ryzen_7_4700u_firmware"},{"vendor":"amd","product":"ryzen_7_4800h_firmware"},{"vendor":"amd","product":"ryzen_7_4800u_firmware"},{"vendor":"amd","product":"ryzen_7_5800h_firmware"},{"vendor":"amd","product":"ryzen_7_5800hs_firmware"},{"vendor":"amd","product":"ryzen_7_5800u_firmware"},{"vendor":"amd","product":"ryzen_7_5825c_firmware"},{"vendor":"amd","product":"ryzen_7_5825u_firmware"},{"vendor":"amd","product":"ryzen_7_pro_3700u_firmware"},{"vendor":"amd","product":"ryzen_9_4900h_firmware"},{"vendor":"amd","product":"ryzen_9_5900hs_firmware"},{"vendor":"amd","product":"ryzen_9_5900hx_firmware"},{"vendor":"amd","product":"ryzen_9_5980hs_firmware"},{"vendor":"amd","product":"ryzen_9_5980hx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2920x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2950x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2970wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_2990wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3960x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3970x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_3990x_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3795wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3945wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3955wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_3995wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5945wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5955wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5965wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5975wx_firmware"},{"vendor":"amd","product":"ryzen_threadripper_pro_5995wx_firmware"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"xen","product":"xen"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040","tags":["x_transferred","Mitigation","Vendor Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/10/2","tags":["mailing-list","x_transferred","Mailing List","Mitigation","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://www.debian.org/security/2023/dsa-5378","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202402-07","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23824"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/"},{"url":"https://github.com/advisories/GHSA-hhhj-6x4j-w995"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-23824","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23824","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230136-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027519","tags":["report"]},{"url":"https://bugzilla.suse.com/1205209","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23824","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230154-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230169-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230170-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230186-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230214-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230672-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-23824","tags":["report"]},{"url":"https://xenbits.xen.org/xsa/advisory-422.html","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23824","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-23824","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T20:48:06.826Z","modified":"2025-02-13T16:32:23.589Z","updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-28753","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T20:48:06Z","modified":"2025-02-13T16:32:23Z","updated_at":"2026-11-03T00:03:52.752782Z"}],"ghsa":[{"id":"GHSA-hhhj-6x4j-w995","title":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-10T12:01:16Z","modified":"2024-02-13T05:08:19Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:55:36.780787Z"}],"nvd":[{"id":"CVE-2022-23824","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T21:15:13.53Z","modified":"2026-06-17T04:30:51.07Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"ALPINE-CVE-2022-23824","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T21:15:13.53Z","modified":"2026-11-03T07:18:33.119020212Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"CVE-2022-23824","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T21:15:13.53Z","modified":"2026-03-15T22:45:53.442131Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-23824","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T21:15:13.53Z","modified":"2026-11-03T08:02:05.928925335Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"UBUNTU-CVE-2022-23824","description":"IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.","status":"published","published":"2022-11-09T21:15:00Z","modified":"2026-10-17T12:56:02.285551636Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"DSA-5378-1","title":"xen - security update","status":"published","published":"2023-03-25T00:00:00Z","modified":"2026-03-09T02:09:24.431013Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"SUSE-SU-2023:0136-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).\n","status":"published","published":"2023-01-25T10:20:51Z","modified":"2026-02-04T02:53:56.642252Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0154-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).\n","status":"published","published":"2023-01-26T14:46:10Z","modified":"2025-05-02T04:32:49.734966Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0169-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).\n\nNon-security fixes:\n\n- Updated to version 4.16.3 (bsc#1027519).\n","status":"published","published":"2023-01-26T17:30:00Z","modified":"2026-02-04T02:34:07.470798Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0170-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative security issues (bsc#1205209).\n","status":"published","published":"2023-01-26T17:30:23Z","modified":"2026-02-04T03:56:21.019165Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0186-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).\n","status":"published","published":"2023-01-27T10:26:43Z","modified":"2026-02-04T02:54:27.253543Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0214-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative security issues (bsc#1205209).\n","status":"published","published":"2023-01-30T16:27:15Z","modified":"2026-02-04T04:13:31.983838Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0672-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).\n","status":"published","published":"2023-03-08T12:17:10Z","modified":"2026-02-04T03:45:11.419627Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}