CVE-2022-29901
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.
Key facts
- CVSS score
- 5.6 (v3.1)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N- Weakness (CWE)
- CWE-200
- EPSS score
- 5.0% (92th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2022-34211)
- Published
- July 12, 2022
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2022-34211 in the EU Vulnerability Database. Last updated in EUVD on August 3, 2024.
View on the EU Vulnerability DatabaseAffected products
- debian / debian linux
- debian / debian linux
- fedoraproject / fedora
- fedoraproject / fedora
- intel / core i3-6100
- intel / core i3-6100 firmware
- intel / core i3-6100e
- intel / core i3-6100e firmware
- intel / core i3-6100h
- intel / core i3-6100h firmware
- intel / core i3-6100t
- intel / core i3-6100t firmware
- intel / core i3-6100te
- intel / core i3-6100te firmware
- intel / core i3-6100u
- intel / core i3-6100u firmware
- intel / core i3-6102e
- intel / core i3-6102e firmware
- intel / core i3-6110u
- intel / core i3-6110u firmware
- intel / core i3-6120
- intel / core i3-6120 firmware
- intel / core i3-6120t
- intel / core i3-6120t firmware
- intel / core i3-6167u
- intel / core i3-6167u firmware
- intel / core i3-6300
- intel / core i3-6300 firmware
- intel / core i3-6300t
- intel / core i3-6300t firmware
- intel / core i3-6320
- intel / core i3-6320 firmware
- intel / core i3-6320t
- intel / core i3-6320t firmware
- intel / core i3-8000
- intel / core i3-8000 firmware
- intel / core i3-8000t
- intel / core i3-8000t firmware
- intel / core i3-8020
- intel / core i3-8020 firmware
- intel / core i3-8100
- intel / core i3-8100 firmware
- intel / core i3-8100h
- intel / core i3-8100h firmware
- intel / core i3-8100t
- intel / core i3-8100t firmware
- intel / core i3-8109u
- intel / core i3-8109u firmware
- intel / core i3-8120
- intel / core i3-8120 firmware
and 220 more…
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- VMware ESXi 7.0 Update 3d - VMware Inc. - Common Criteria CCEVS-VR-VID-11249-2022 - archived
References
- http://www.openwall.com/lists/oss-security/2022/07/12/2
- http://www.openwall.com/lists/oss-security/2022/07/12/4
- http://www.openwall.com/lists/oss-security/2022/07/12/5
- http://www.openwall.com/lists/oss-security/2022/07/13/1
- https://comsec.ethz.ch/retbleed
- https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/
- https://security.gentoo.org/glsa/202402-07
- https://security.netapp.com/advisory/ntap-20221007-0007/
- https://www.debian.org/security/2022/dsa-5207
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html
- https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain