CVE-2022-23824High

AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions

Published
November 8, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-23824 →

📋 Description

Are any additional steps required to protect my system after installing the November Windows updates? Customers who allow untrusted users to execute arbitrary code might wish to implement some extra security features within their systems. These features protect against the intra-process disclosure vectors that this speculative execution vulnerability describes. See the following for more information. Microsoft Windows client customers: See Microsoft Knowledge Base Article 4073119. Microsoft Windows Server/Azure Stack HCI customers: See Microsoft Knowledge Base Article 4072698 for additional information, including workarounds. Microsoft Azure has taken steps to address the security vulnerabilities at the hypervisor level to protect VMs running in Azure. More information can be found here. Can I expect any performance impact after I configure the registry keys? In some cases, installing these updates will have a performance impact. In testing Microsoft has seen some performance impact with these mitigations, in particular when hyperthreading is disabled. Microsoft values the security of its software and services and has made the decision to implement certain mitigation strategies in an effort to better secure our products. In some cases, mitigations are not enabled by default to allow users and administrators to evaluate the performance impact and risk exposure before deciding to enable the mitigations. We continue to work with hardware vendors to improve performance while maintaining a high level of security. Are Microsoft Azure assets protected? Microsoft has already deployed mitigations across our cloud services. More information is available here. How do I know if I am affected? Please refer to AMD advisory AMD-SB-1037 to determine which AMD CPUs are affected.

Why is this AMD CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protection against the vulnerability. Please see the following for more information: AMD-SB-1040

🎯 Affected products43

  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 20H2 for 32-bit Systems
  • Windows 10 Version 20H2 for ARM64-based Systems
  • Windows 10 Version 21H1 for 32-bit Systems
  • Windows 10 Version 21H1 for ARM64-based Systems
  • Windows 10 Version 21H1 for x64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 11 Version 22H2 for ARM64-based Systems
  • Windows 11 Version 22H2 for x64-based Systems
  • Windows 11 version 21H2 for ARM64-based Systems
  • Windows 11 version 21H2 for x64-based Systems
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows 8.1 for 32-bit systems
  • Windows 8.1 for x64-based systems
  • Windows RT 8.1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • +13 more not shown

✅ Remediation

KB5019966 (Security Update) — fixed build 10.0.17763.3650 KB5019959 (Security Update) — fixed build 10.0.19043.2251 KB5019081 (Security Update) — fixed build 10.0.20348.1249 KB5019080 (Security Hotpatch Update) — fixed build 10.0.20348.1251 KB5019959 (Security Update) — fixed build 10.0.19042.2251 KB5019961 (Security Update) — fixed build 10.0.22000.1219 KB5019959 (Security Update) — fixed build 10.0.19044.2251 KB5019980 (Security Update) — fixed build 10.0.22621.819 KB5019959 (Security Update) — fixed build 10.0.19045.2251 KB5019970 (Security Update) — fixed build 10.0.10240.19567 KB5019964 (Security Update) — fixed build 10.0.14393.5501 KB5020000 (Monthly Rollup) — fixed build 6.1.7601.26221 KB5020013 (Security Only) — fixed build 6.1.7601.26221 KB5020023 (Monthly Rollup) — fixed build 6.3.9600.20671 KB5020010 (Security Only) — fixed build 6.3.9600.20670 KB5020019 (Monthly Rollup) — fixed build 6.0.6003.21768 KB5020005 (Security Only) — fixed build 6.0.6003.21768 KB5020009 (Monthly Rollup) — fixed build 6.2.9200.23968 KB5020003 (Security Only) — fixed build 6.2.9200.23968

🔗 References (32)