Skip to content

kernel CVE-2022-26373

Moderate
rpkelly published GHSA-5qh2-8cjg-qx5w Jan 27, 2023

Package

kernel-5.10 (bottlerocket)

Affected versions

< 1.12.0

Patched versions

1.12.0
kernel-5.15 (bottlerocket)
< 1.12.0
1.12.0

Description

In certain processors with Intel's Enhanced Indirect Branch Restricted Speculation (eIBRS) capabilities, soon after VM exit or IBPB command event, the linear address following the most recent near CALL instruction prior to a VM exit may be used as the Return Stack Buffer (RSB) prediction.

Severity

Moderate

CVE ID

CVE-2022-26373

Weaknesses

No CWEs