All vulnerabilities

Servers and applications

CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

Severity
Medium 6.5
Published
12 Jul 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 7.0-update_3e
  • Version 7.0-update_3d
  • Version 7.0-update_2e
  • Version 7.0-update_2d
All 15 release lines
  • Version 7.0-beta
  • Version 7.0-update_1a
  • Version 7.0-update_1b
  • Version 7.0-update_1c
  • Version 7.0-update_2a
  • Version 7.0-update_2c
  • Version 7.0-update_3c
  • Version 7.0
  • Version 7.0-update_1
  • Version 7.0-update_1d
  • Version 7.0-update_2
  • Version 7.0-update_2d
  • Version 7.0-update_2e
  • Version 7.0-update_3d
  • Version 7.0-update_3e

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-29901
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-29901