What’s Vulnerable › Vulnerabilities

CVE-2022-29900

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-07-12 · updated 2026-06-17
• Weakness: CWE-212

Description

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Affected products

• AMD A10-9600P Firmware: all versions
• AMD A10-9630P Firmware: all versions
• AMD A12-9700P Firmware: all versions
• AMD A12-9730P Firmware: all versions
• AMD A4-9120 Firmware: all versions
• AMD A6-9210 Firmware: all versions
• AMD A6-9220 Firmware: all versions
• AMD A6-9220C Firmware: all versions
• AMD A9-9410 Firmware: all versions
• AMD A9-9420 Firmware: all versions
• AMD Athlon Gold 3150U Firmware: all versions
• AMD Athlon Silver 3050U Firmware: all versions
• AMD Athlon X4 750 Firmware: all versions
• AMD Athlon X4 760K Firmware: all versions
• AMD Athlon X4 830 Firmware: all versions
• AMD Athlon X4 835 Firmware: all versions
• AMD Athlon X4 840 Firmware: all versions
• AMD Athlon X4 845 Firmware: all versions
• AMD Athlon X4 860K Firmware: all versions
• AMD Athlon X4 870K Firmware: all versions
• AMD Athlon X4 880K Firmware: all versions
• AMD Athlon X4 940 Firmware: all versions
• AMD Athlon X4 950 Firmware: all versions
• AMD Athlon X4 970 Firmware: all versions
• AMD Epyc 7001 Firmware: all versions
• AMD Epyc 7002 Firmware: all versions
• AMD Epyc 7251 Firmware: all versions
• AMD Epyc 7252 Firmware: all versions
• AMD Epyc 7261 Firmware: all versions
• AMD Epyc 7262 Firmware: all versions

References

• https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
• https://www.debian.org/security/2022/dsa-5207
• https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/
• https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
• https://www.debian.org/security/2022/dsa-5207
• https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/

Get alerted when CVE-2022-29900 or the next vulnerability affects your stack