vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-23825

MEDIUM
6.5
CVSS Score
Published: July 14, 2022 at 07:27 PM UTC
Updated: June 17, 2026 at 04:30 AM UTC
249 products affected across 4 vendorsDebian LinuxFedoraESXi

Using AMD Processors by AMD?

Get instant alerts when new vulnerabilities affect AMD Processors - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.8%

Description

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

A10-9600p Firmware· AMD
95%
All versions
amd-a10-9600p (same device)
A10-9630p Firmware· AMD
95%
All versions
amd-a10-9630p (same device)
A12-9700p Firmware· AMD
95%
All versions
amd-a12-9700p (same device)
A12-9730p Firmware· AMD
95%
All versions
amd-a12-9730p (same device)
A4-9120 Firmware· AMD
95%
All versions
amd-a4-9120 (same device)
A6-9210 Firmware· AMD
95%
All versions
amd-a6-9210 (same device)
A6-9220 Firmware· AMD
95%
All versions
amd-a6-9220 (same device)
A6-9220c Firmware· AMD
95%
All versions
amd-a6-9220c (same device)
A9-9410 Firmware· AMD
95%
All versions
amd-a9-9410 (same device)
A9-9420 Firmware· AMD
95%
All versions
amd-a9-9420 (same device)

References (9)

Mailing ListThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2022/11/08/1
Mailing ListThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2022/11/10/2
Vendor Advisory
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/
Vendor Advisory
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/
Vendor Advisory
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/
Vendor Advisory
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
Vendor Advisory
Source: [email protected]
https://security.gentoo.org/glsa/202402-07
Vendor Advisory
Source: [email protected]
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037

CVSS

6.5MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-668

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card