CVE-2022-29901

Name of the Vulnerable Software and Affected Versions Intel microprocessor generations 6 through 8

Description The issue is related to errors in processing the ret instruction, which retrieves an address for transition from the stack. This can allow an attacker to disclose protected information from kernel memory or launch an attack on the host system from virtual machines. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Recommendations For Intel microprocessor generations 6 through 8, consider disabling the use of the ret instruction in sensitive code paths until a patch is available. Restrict access to kernel memory to minimize the risk of exploitation. As a temporary workaround, apply configuration changes to mitigate the risk of arbitrary speculative code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.