AMD CPU (Retbleed): Retbleed: arbitrary speculative code execution via return instructions

CVE-2022-29900Kernel, userspace & hypervisorcurated

Impact

Retbleed: arbitrary speculative code execution via return instructions - cross-domain secret disclosure

Who can reach it

Any tenant process in a container; tenant VM guest

What to do

Kernel mitigation (retbleed=) + reboot. Standing performance cost, historically severe on Zen 1/2 - measure before enabling fleet-wide

References

https://access.redhat.com/security/cve/CVE-2022-29900

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.