Multiple vulnerabilities in AMD CPUs

Published: 2022-07-12

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2022-23825 CVE-2022-29900
CWE-ID	CWE-843 CWE-1037
Exploitation vector	Local
Public exploit	N/A
Vulnerable software	AMD Athlon X4 processor Hardware solutions / Firmware AMD Ryzen Threadripper PRO processor Hardware solutions / Firmware 2nd Gen AMD Ryzen Threadripper processors Hardware solutions / Firmware 3rd Gen AMD Ryzen Threadripper processors Hardware solutions / Firmware 7th Generation AMD A-Series APUs Hardware solutions / Firmware AMD Ryzen 2000 series Desktop processor Hardware solutions / Firmware AMD Ryzen 3000 Series Desktop processor Hardware solutions / Firmware AMD Ryzen 4000 Series Desktop processors with Radeon graphics Hardware solutions / Firmware AMD Ryzen 2000 Series Mobile processor Hardware solutions / Firmware AMD Athlon 3000 Series Mobile processors with Radeon Graphics Hardware solutions / Firmware AMD Ryzen 3000 Series Mobile processor Hardware solutions / Firmware 2nd Gen AMD Ryzen Mobile processor with Radeon graphics Hardware solutions / Firmware AMD Ryzen 4000 Series Mobile processors with Radeon graphics Hardware solutions / Firmware AMD Ryzen 5000 Series Mobile processor with Radeon graphics Hardware solutions / Firmware AMD Athlon Mobile processor with Radeon graphics Hardware solutions / Firmware 1st Gen AMD EPYC Processors Hardware solutions / Firmware 2nd Gen AMD EPYC Processors Hardware solutions / Firmware
Vendor	AMD

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Type Confusion

EUVDB-ID: #VU65204

Risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-23825

CWE-ID: CWE-843 - Type confusion

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a branch type confusion. A local user can force the branch predictor to predict the wrong branch type and gain access to sensitive information.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AMD Athlon X4 processor: All versions

AMD Ryzen Threadripper PRO processor: All versions

2nd Gen AMD Ryzen Threadripper processors: All versions

3rd Gen AMD Ryzen Threadripper processors: All versions

7th Generation AMD A-Series APUs: All versions

AMD Ryzen 2000 series Desktop processor: All versions

AMD Ryzen 3000 Series Desktop processor: All versions

AMD Ryzen 4000 Series Desktop processors with Radeon graphics: All versions

AMD Ryzen 2000 Series Mobile processor: All versions

AMD Athlon 3000 Series Mobile processors with Radeon Graphics: All versions

AMD Ryzen 3000 Series Mobile processor: All versions

2nd Gen AMD Ryzen Mobile processor with Radeon graphics: All versions

AMD Ryzen 4000 Series Mobile processors with Radeon graphics: All versions

AMD Ryzen 5000 Series Mobile processor with Radeon graphics: All versions

AMD Athlon Mobile processor with Radeon graphics: All versions

1st Gen AMD EPYC Processors: All versions

2nd Gen AMD EPYC Processors: All versions

CPE2.3

External links

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Processor optimization removal or modification of security-critical code

EUVDB-ID: #VU65205