CVE-2022-23824

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.

• http://www.openwall.com/lists/oss-security/2022/11/10/2Mailing List, Mitigation, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040Mitigation, Vendor Advisory
• https://www.debian.org/security/2023/dsa-5378
• http://www.openwall.com/lists/oss-security/2022/11/10/2Mailing List, Mitigation, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
• https://security.gentoo.org/glsa/202402-07
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040Mitigation, Vendor Advisory
• https://www.debian.org/security/2023/dsa-5378

Published

Nov 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23818Insufficient input validation on the model specific register…7.5
• CVE-2022-2382The Product Slider for WooCommerce WordPress plugin before 2…4.3
• CVE-2022-23820Failure to validate the AMD SMM communication buffer may all…9.8
• CVE-2022-23821Improper access control in System Management Mode (SMM) may …9.8
• CVE-2022-23822In this physical attack, an attacker may potentially exploit…6.8
• CVE-2022-23823A potential vulnerability in some AMD processors using frequ…6.5
• CVE-2022-23825Aliases in the branch predictor may cause some AMD processor…6.5
• CVE-2022-23826A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics inte…1.8
• CVE-2022-23827Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-23829A potential weakness in AMD SPI protection features may allo…8.2
• CVE-2022-2383The Feed Them Social WordPress plugin before 3.0.1 does not …6.1
• CVE-2022-23830SMM configuration may not be immutable, as intended, when SN…5.3