PT-2023-14101

CVE-2022-42331

·

Published

2023-03-21

·

Updated

2024-06-15

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions x86 (affected versions not specified)
Description The issue is related to a speculative vulnerability in the 32bit SYSCALL path. Due to an oversight in the original Spectre/Meltdown security work, one entry path performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Related identifiers
DSA-5378-1
OPENSUSE-SU-2024:12833-1
SUSE-SU-2023:0845-1
SUSE-SU-2023_0845-1
SUSE-SU-2023:0846-1
SUSE-SU-2023_0846-1
SUSE-SU-2023:0847-1
SUSE-SU-2023_0847-1
SUSE-SU-2023:0848-1
SUSE-SU-2023_0848-1
SUSE-SU-2023:0848-2
SUSE-SU-2023:0858-1
SUSE-SU-2023_0858-1
SUSE-SU-2023:0859-1
SUSE-SU-2023_0859-1
SUSE-SU-2023:0862-1
SUSE-SU-2023_0862-1
Found an issue in the description? Have something to add? Feel free to write us 👾