CVE-2022-27672

2023-03-0100:00:00

ubuntu.com

smt enabled

information disclosure

amd processors

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

13.2%

JSON

When SMT is enabled, certain AMD processors may speculatively execute
instructions using a target from the sibling thread after an SMT mode
switch potentially resulting in information disclosure.

Notes

Author	Note
mdeslaur	hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags_xen: universe-binary

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-218.229UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-156.173UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-72.79UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-42.43UNKNOWN
ubuntu22.04noarchlinux-allwinner-5.19< 5.19.0-1012.12~22.04.1UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1161.174UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1107.115UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1036.40UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1025.26UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1036.40~20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-218.229	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-156.173	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-72.79	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-42.43	UNKNOWN
ubuntu	22.04	noarch	linux-allwinner-5.19	< 5.19.0-1012.12~22.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1161.174	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1107.115	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1036.40	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1025.26	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1036.40~20.04.1	UNKNOWN