CVE-2022-0001: Medium severity microsoft windows server 2012 r2 vulnerability

Branch History Injection (BHI) describes a specific form of intra-mode BTI (bug CVE-2022-0001), where an unprivileged attacker may manipulate branch history before transitioning to supervisor or VMX root mode in an effort to cause an indirect branch predictor to select a specific predictor entry for an indirect branch, and a disclosure gadget at the predicted target will transiently execute. This may be possible since the relevant branch history may contain branches taken in previous security contexts, and in particular, in other predictor modes.

— Red Hat

Intel: CVE-2022-0001 Branch History Injection

— Microsoft

Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

This CVE was assigned by Intel. Please see CVE-2022-0001 on CVE.org for more information.

— Microsoft