Loading story…
AMD documented CVE-2022-23825, a medium-severity speculative-execution flaw affecting certain processor families. Branch-predictor aliasing can cause CPUs to incorrectly predict a branch type, enabling a local, low-privileged attacker to infer sensitive information through branch type confusion. The issue is related to Spectre Variant 2 research; AMD recommends that software developers apply its Branch Type Confusion mitigation guidance and reported no known active exploitation at disclosure.
Red Hat rates the vulnerability as moderate, assigning CVSS 3.1 score 5.6 versus the NVD score of 6.5 because exploitation complexity is high in its environments. Red Hat released updated kernel and kernel-rt packages for RHEL 7, 8, and 9, including RHEL 9.0 Extended Update Support and Red Hat Virtualization 4 on RHEL 8; RHEL 6 will not receive a fix. Organizations operating affected AMD systems should deploy vendor kernel updates and verify applicable speculative-execution mitigations are enabled.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat released fixes for the RHEL 7 kernel and kernel-rt packages in RHSA-2022:7337 and RHSA-2022:7338.
Red Hat released RHEL 8 kernel and kernel-rt fixes for CVE-2022-23825 through RHSA-2022:7110 and RHSA-2022:7134. The RHSA-2022:7110 update also provided the kernel fix for Red Hat Virtualization 4 on RHEL 8.
AMD published AMD-SB-1037, disclosing CVE-2022-23825 (Branch Type Confusion) and CVE-2022-29900/RETbleed as medium-severity issues related to Spectre Variant 2. AMD recommended software mitigations and said it was unaware of active exploitation against AMD products related to CVE-2017-5715 at disclosure.
Red Hat designated the RHEL 6 kernel as will not fix for CVE-2022-23825 and recommended upgrading to a supported product version containing a fix.
Red Hat released CVE-2022-23825 fixes for the RHEL 9.0 Extended Update Support kernel and kernel-rt packages in RHSA-2022:8973 and RHSA-2022:8974.
Red Hat released RHEL 9 kernel and kernel-rt fixes for CVE-2022-23825 through RHSA-2022:8267 and RHSA-2022:7933.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft disclosed and patched **CVE-2023-20588**, an AMD processor information disclosure vulnerability known as **AMD Speculative Leaks**, after including mitigations in its December 2023 security updates. The flaw affects multiple AMD CPU families, including **EPYC**, **Athlon**, and **Ryzen 3000-series** processors, and stems from divide-by-zero behavior that can cause the processor to transiently return random or stale data during speculative execution. The issue requires **local access** to exploit, but it was treated as a high-severity risk because sensitive data could be exposed from affected systems. Microsoft and CSIRT.SK said the vulnerability was identified by researchers from **Microsoft Azure Research** and **Vrije Universiteit Amsterdam**, and they urged organizations to apply Windows updates promptly. Guidance also advised developers to avoid using privileged data in divide-by-zero operations and to follow secure coding practices to reduce exposure.
Jul 24, 2026
Red Hat released Moderate-severity kernel updates for Red Hat Enterprise Linux 9 and 10 to remediate `CVE-2024-36357`, a transient-execution flaw in certain AMD processors. A local attacker with low privileges could potentially infer data held in the L1D cache, exposing sensitive information across privilege boundaries; Red Hat rates the issue CVSS 5.6. For RHEL 9, fixes are provided through `RHSA-2025:19930` and `RHSA-2025:20518`; RHEL 10 is addressed by `RHSA-2025:20095`. `RHSA-2025:19930` also fixes `CVE-2024-36350` and adds a conditional IBPB mitigation for `CVE-2025-40300` (VMSCAPE). Administrators should install the applicable kernel updates and reboot systems for the protections to take effect; RHEL 6, 7, and 8 kernel packages are out of support scope and should be considered affected under Red Hat policy.
Aug 26, 2026
Researchers at VUSec and Scuola Superiore Sant’Anna disclosed **Branch Target Reuse (BTR)**, a Spectre-v2-class attack that abuses stale indirect-branch predictor entries after JIT-generated code is freed and its cache region reused. The resulting speculative execute-after-free condition can redirect transient execution and expose secrets through cache side channels. Tests found the issue across evaluated Intel, AMD, and Arm CPUs and in JIT environments including Linux cBPF, Firefox SpiderMonkey, and Oracle GraalVM. Two end-to-end exploits against Linux’s cBPF JIT leaked arbitrary kernel memory on fully patched Intel systems with default mitigations enabled, recovering a root password hash within minutes at roughly 8 bytes per second. Linux has released and backported cBPF hardening tracked as `CVE-2026-64507` and `CVE-2026-64508`; mitigations use indirect branch prediction barriers on x86. GraalVM is randomizing JIT code-cache locations, while Mozilla is prioritizing Firefox site isolation after evaluating IBPB-based defenses. Researchers warned that existing hardware lacks a general mechanism to synchronize branch-prediction state with modified runtime code.
Oct 3, 2026