CVE-2022-37459 - Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue

Back Back to CVE browser

HIGH

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue

Published Aug 17, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.22%

Description

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-203

References (3)

https://amperecomputing.com/products/security-bulletins/retbleed.html
x_refsource_MISCVendor Advisory
https://developer.arm.com/documentation/ka005138/1-0/
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40084
Advisory

Link	Providers	Tags
https://amperecomputing.com/products/security-bulletins/retbleed.html		x_refsource_MISCVendor Advisory
https://developer.arm.com/documentation/ka005138/1-0/		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40084		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 17, 2022

Updated Aug 3, 2024

Reserved Aug 7, 2022

Link CVE-2022-37459

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-37459

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 17, 2022

Updated Aug 3, 2024

Link EUVD-2022-40084

GitHub

No data