VULNERABILITY INTELLIGENCE
CVE-2022-29901
CVSS score5.6 MEDIUM
EPSS probability5.01%
CISA KEVNot currently listed
Published2022-07-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.
Weakness classification
- secure@intel.com: CWE-200
- nvd@nist.gov: CWE-668