What’s Vulnerable › Vulnerabilities

CVE-2022-23825

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-07-14 · updated 2026-06-17
• Weakness: CWE-668

Description

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.

Affected products

• AMD A10-9600P Firmware: all versions
• AMD A10-9630P Firmware: all versions
• AMD A12-9700P Firmware: all versions
• AMD A12-9730P Firmware: all versions
• AMD A4-9120 Firmware: all versions
• AMD A6-9210 Firmware: all versions
• AMD A6-9220 Firmware: all versions
• AMD A6-9220C Firmware: all versions
• AMD A9-9410 Firmware: all versions
• AMD A9-9420 Firmware: all versions
• AMD Athlon Gold 3150U Firmware: all versions
• AMD Athlon Silver 3050U Firmware: all versions
• AMD Athlon X4 750 Firmware: all versions
• AMD Athlon X4 760K Firmware: all versions
• AMD Athlon X4 830 Firmware: all versions
• AMD Athlon X4 835 Firmware: all versions
• AMD Athlon X4 840 Firmware: all versions
• AMD Athlon X4 845 Firmware: all versions
• AMD Athlon X4 860K Firmware: all versions
• AMD Athlon X4 870K Firmware: all versions
• AMD Athlon X4 880K Firmware: all versions
• AMD Athlon X4 940 Firmware: all versions
• AMD Athlon X4 950 Firmware: all versions
• AMD Athlon X4 970 Firmware: all versions
• AMD Epyc 7001 Firmware: all versions
• AMD Epyc 7002 Firmware: all versions
• AMD Epyc 7251 Firmware: all versions
• AMD Epyc 7252 Firmware: all versions
• AMD Epyc 7261 Firmware: all versions
• AMD Epyc 7262 Firmware: all versions

References

• http://www.openwall.com/lists/oss-security/2022/11/08/1
• http://www.openwall.com/lists/oss-security/2022/11/10/2
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
• https://www.debian.org/security/2022/dsa-5184
• http://www.openwall.com/lists/oss-security/2022/11/08/1
• http://www.openwall.com/lists/oss-security/2022/11/10/2
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/

Get alerted when CVE-2022-23825 or the next vulnerability affects your stack