What’s Vulnerable › Vulnerabilities

CVE-2022-23824

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-09 · updated 2026-06-17

Description

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.

Affected products

• AMD A10-9600P Firmware: all versions
• AMD A10-9630P Firmware: all versions
• AMD A12-9700P Firmware: all versions
• AMD A12-9730P Firmware: all versions
• AMD A4-9120 Firmware: all versions
• AMD A6-9210 Firmware: all versions
• AMD A6-9220 Firmware: all versions
• AMD A6-9220C Firmware: all versions
• AMD A9-9410 Firmware: all versions
• AMD A9-9420 Firmware: all versions
• AMD Athlon Gold 3150U Firmware: all versions
• AMD Athlon Silver 3050U Firmware: all versions
• AMD Athlon X4 750 Firmware: all versions
• AMD Athlon X4 760K Firmware: all versions
• AMD Athlon X4 830 Firmware: all versions
• AMD Athlon X4 835 Firmware: all versions
• AMD Athlon X4 840 Firmware: all versions
• AMD Athlon X4 845 Firmware: all versions
• AMD Athlon X4 860K Firmware: all versions
• AMD Athlon X4 870K Firmware: all versions
• AMD Athlon X4 880K Firmware: all versions
• AMD Athlon X4 940 Firmware: all versions
• AMD Athlon X4 950 Firmware: all versions
• AMD Athlon X4 970 Firmware: all versions
• AMD Epyc 7001 Firmware: all versions
• AMD Epyc 7002 Firmware: all versions
• AMD Epyc 7003 Firmware: all versions
• AMD Epyc 7251 Firmware: all versions
• AMD Epyc 7252 Firmware: all versions
• AMD Epyc 7261 Firmware: all versions

References

• http://www.openwall.com/lists/oss-security/2022/11/10/2
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040
• https://www.debian.org/security/2023/dsa-5378
• http://www.openwall.com/lists/oss-security/2022/11/10/2
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040
• https://www.debian.org/security/2023/dsa-5378

Get alerted when CVE-2022-23824 or the next vulnerability affects your stack