Advisory Published
CVE Published
Updated

CVE-2022-0002

First published: Tue Mar 08 2022(Updated: )

A flaw was found in hw. The Intra-mode BTI refers to a variant of Branch Target Injection aka SpectreV2 (BTI) where an indirect branch speculates to an aliased predictor entry for a different indirect branch in the same predictor mode, and a disclosure gadget at the predicted target transiently executes. These predictor entries may contain targets corresponding to the targets of an indirect near jump, indirect near call, and near return instructions, even if these branches were only transiently executed. The managed runtimes provide an attacker with the means to create the aliasing required for intra-mode BTI attacks.

Credit: secure@intel.com secure@intel.com

Affected SoftwareAffected VersionHow to fix
redhat/kernel-rt<0:4.18.0-372.9.1.rt7.166.el8
0:4.18.0-372.9.1.rt7.166.el8
redhat/kernel<0:4.18.0-372.9.1.el8
0:4.18.0-372.9.1.el8
Intel Atom C3308
Intel Atom C3336
Intel Atom C3338
Intel Atom C3338r
Intel Atom C3436l
Intel Atom C3508
Intel Atom C3538
Intel Atom C3558
Intel Atom C3558r
Intel Atom C3558rc
Intel Atom C3708
Intel Atom C3750
Intel Atom C3758
Intel Atom C3758r
Intel Atom C3808
Intel Atom C3830
Intel Atom C3850
Intel Atom C3858
Intel Atom C3950
Intel Atom C3955
Intel Atom C3958
Intel Atom P5921b
Intel Atom P5931b
Intel Atom P5942b
Intel Atom P5962b
Intel Atom X5-a3930
Intel Atom X5-a3940
Intel Atom X5-a3950
Intel Atom X5-a3960
Intel Atom X5-e3930
Intel Atom X5-e3940
Intel Atom X5-z8300
Intel Atom X5-z8330
Intel Atom X5-z8350
Intel Atom X5-z8500
Intel Atom X5-z8550
Intel Atom X6200fe
Intel Atom X6211e
Intel Atom X6212re
Intel Atom X6413e
Intel Atom X6425e
Intel Atom X6425re
Intel Atom X6427fe
Intel Atom X7-e3950
Intel Atom X7-z8700
Intel Atom X7-z8750
Intel Celeron 5305u
Intel Celeron 6305
Intel Celeron 6305e
Intel Celeron 6600he
Intel Celeron G5205u
Intel Celeron G5305u
Intel Celeron G5900
Intel Celeron G5900t
Intel Celeron G5905
Intel Celeron G5905t
Intel Celeron G5920
Intel Celeron G5925
Intel Celeron G6900
Intel Celeron G6900t
Intel Celeron J3355
Intel Celeron J3355e
Intel Celeron J3455
Intel Celeron J3455e
Intel Celeron J4005
Intel Celeron J4025
Intel Celeron J4105
Intel Celeron J4125
Intel Celeron J6413
Intel Celeron N3350
Intel Celeron N3350e
Intel Celeron N3450
Intel Celeron N4000
Intel Celeron N4020
Intel Celeron N4100
Intel Celeron N4120
Intel Celeron N4500
Intel Celeron N4504
Intel Celeron N5100
Intel Celeron N5105
Intel Celeron N6211
Intel Core I3-1000g1
Intel Core I3-1000g4
Intel Core I3-1005g1
Intel Core I3-10100
Intel Core I3-10100f
Intel Core I3-10100t
Intel Core I3-10100te
Intel Core I3-10105
Intel Core I3-10105f
Intel Core I3-10105t
Intel Core I3-10110u
Intel Core I3-10300
Intel Core I3-10300t
Intel Core I3-10305
Intel Core I3-10305t
Intel Core I3-10320
Intel Core I3-10325
Intel Core I3-11100he
Intel Core I3-1110g4
Intel Core I3-1115g4
Intel Core I3-1115g4e
Intel Core I3-1115gre
Intel Core I3-1120g4
Intel Core I3-1125g4
Intel Core I3-12100
Intel Core I3-12100f
Intel Core I3-12100t
Intel Core I3-1220p
Intel Core I3-12300
Intel Core I3-12300t
Intel Core I3-l13g4
Intel Core I5-10110y
Intel Core I5-10200h
Intel Core I5-10210u
Intel Core I5-10210y
Intel Core I5-10300h
Intel Core I5-1030g4
Intel Core I5-1030g7
Intel Core I5-10310y
Intel Core I5-1035g1
Intel Core I5-1035g4
Intel Core I5-1035g7
Intel Core I5-10400
Intel Core I5-10400f
Intel Core I5-10400h
Intel Core I5-10400t
Intel Core I5-10500
Intel Core I5-10500t
Intel Core I5-10500te
Intel Core I5-10505
Intel Core I5-10600
Intel Core I5-10600k
Intel Core I5-10600kf
Intel Core I5-10600t
Intel Core I5-11260h
Intel Core I5-11300h
Intel Core I5-1130g7
Intel Core I5-11320h
Intel Core I5-1135g7
Intel Core I5-11400
Intel Core I5-11400f
Intel Core I5-11400h
Intel Core I5-11400t
Intel Core I5-1140g7
Intel Core I5-1145g7
Intel Core I5-1145g7e
Intel Core I5-1145gre
Intel Core I5-11500
Intel Core I5-11500h
Intel Core I5-11500t
Intel Core I5-1155g7
Intel Core I5-11600
Intel Core I5-11600k
Intel Core I5-11600kf
Intel Core I5-11600t
Intel Core I5-12400
Intel Core I5-12400f
Intel Core I5-12400t
Intel Core I5-1240p
Intel Core I5-12450h
Intel Core I5-12500
Intel Core I5-12500h
Intel Core I5-12500t
Intel Core I5-1250p
Intel Core I5-12600
Intel Core I5-12600h
Intel Core I5-12600k
Intel Core I5-12600kf
Intel Core I5-12600t
Intel Core I5-8200y
Intel Core I5-8210y
Intel Core I5-8265u
Intel Core I5-8310y
Intel Core I5-8365u
Intel Core I5-9300h
Intel Core I5-9400
Intel Core I5-9400f
Intel Core I5-9400h
Intel Core I5-9600k
Intel Core I5-9600kf
Intel Core I5-l16g7
Intel Core I7-10510u
Intel Core I7-10510y
Intel Core I7-1060g7
Intel Core I7-10610u
Intel Core I7-1065g7
Intel Core I7-10700
Intel Core I7-10700e
Intel Core I7-10700f
Intel Core I7-10700k
Intel Core I7-10700kf
Intel Core I7-10700t
Intel Core I7-10700te
Intel Core I7-10710u
Intel Core I7-10750h
Intel Core I7-10810u
Intel Core I7-10850h
Intel Core I7-10870h
Intel Core I7-10875h
Intel Core I7-11370h
Intel Core I7-11375h
Intel Core I7-11390h
Intel Core I7-1160g7
Intel Core I7-1165g7
Intel Core I7-11700
Intel Core I7-11700f
Intel Core I7-11700k
Intel Core I7-11700kf
Intel Core I7-11700t
Intel Core I7-11800h
Intel Core I7-1180g7
Intel Core I7-11850h
Intel Core I7-11850he
Intel Core I7-1185g7
Intel Core I7-1185g7e
Intel Core I7-1185gre
Intel Core I7-1195g7
Intel Core I7-1260p
Intel Core I7-12650h
Intel Core I7-12700
Intel Core I7-12700f
Intel Core I7-12700h
Intel Core I7-12700k
Intel Core I7-12700kf
Intel Core I7-12700t
Intel Core I7-1270p
Intel Core I7-12800h
Intel Core I7-1280p
Intel Core I7-7640x
Intel Core I7-7740x
Intel Core I7-7800x
Intel Core I7-7820x
Intel Core I7-8500y
Intel Core I7-8565u
Intel Core I7-8665u
Intel Core I7-9700k
Intel Core I7-9700kf
Intel Core I7-9750hf
Intel Core I7-9850h
Intel Core I9-10850h
Intel Core I9-10850k
Intel Core I9-10885h
Intel Core I9-10900
Intel Core I9-10900e
Intel Core I9-10900f
Intel Core I9-10900k
Intel Core I9-10900kf
Intel Core I9-10900t
Intel Core I9-10900te
Intel Core I9-10900x
Intel Core I9-10920x
Intel Core I9-10940x
Intel Core I9-10980hk
Intel Core I9-11900
Intel Core I9-11900f
Intel Core I9-11900h
Intel Core I9-11900k
Intel Core I9-11900kf
Intel Core I9-11900t
Intel Core I9-11950h
Intel Core I9-11980hk
Intel Core I9-12900
Intel Core I9-12900f
Intel Core I9-12900h
Intel Core I9-12900hk
Intel Core I9-12900k
Intel Core I9-12900kf
Intel Core I9-12900t
Intel Core I9-7900x
Intel Core I9-7920x
Intel Core I9-7940x
Intel Core I9-7960x
Intel Core I9-9800x
Intel Core I9-9820x
Intel Core I9-9880h
Intel Core I9-9900k
Intel Core I9-9900kf
Intel Core I9-9900x
Intel Core I9-9920x
Intel Core I9-9940x
Intel Core I9-9960x
Intel Core I9-9980hk
Intel Core M3-8100y
Intel Pentium Gold 7505
Intel Pentium Gold G6400
Intel Pentium Gold G6400t
Intel Pentium Gold G6405
Intel Pentium Gold G6405t
Intel Pentium Gold G6405u
Intel Pentium Gold G6500
Intel Pentium Gold G6500t
Intel Pentium Gold G6505
Intel Pentium Gold G6505t
Intel Pentium Gold G6600
Intel Pentium Gold G6605
Intel Pentium Gold G7400
Intel Pentium Gold G7400t
Intel Pentium J4205
Intel Pentium J6425
Intel Pentium N4200
Intel Pentium N4200e
Intel Pentium N6415
Intel Pentium Silver J5005
Intel Pentium Silver J5040
Intel Pentium Silver N5000
Intel Pentium Silver N5030
Intel Pentium Silver N6000
Intel Pentium Silver N6005
Intel Puma 7
Intel Xeon Bronze 3204
Intel Xeon Bronze 3206r
Intel Xeon D1700
Intel Xeon D2700
Intel Xeon E-2278g
Intel Xeon E-2278ge
Intel Xeon E-2278gel
Intel Xeon E-2286m
Intel Xeon E-2288g
Intel Xeon E-2314
Intel Xeon E-2324g
Intel Xeon E-2334
Intel Xeon E-2336
Intel Xeon E-2356g
Intel Xeon E-2374g
Intel Xeon E-2378
Intel Xeon E-2378g
Intel Xeon E-2386g
Intel Xeon E-2388g
Intel Xeon Gold 5215
Intel Xeon Gold 5215l
Intel Xeon Gold 5217
Intel Xeon Gold 5218
Intel Xeon Gold 5218b
Intel Xeon Gold 5218n
Intel Xeon Gold 5218r
Intel Xeon Gold 5218t
Intel Xeon Gold 5220
Intel Xeon Gold 5220r
Intel Xeon Gold 5220s
Intel Xeon Gold 5220t
Intel Xeon Gold 5222
Intel Xeon Gold 5315y
Intel Xeon Gold 5317
Intel Xeon Gold 5318h
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y
Intel Xeon Gold 5320
Intel Xeon Gold 5320h
Intel Xeon Gold 5320t
Intel Xeon Gold 6208u
Intel Xeon Gold 6209u
Intel Xeon Gold 6210u
Intel Xeon Gold 6212u
Intel Xeon Gold 6222v
Intel Xeon Gold 6226
Intel Xeon Gold 6226r
Intel Xeon Gold 6230
Intel Xeon Gold 6230n
Intel Xeon Gold 6230r
Intel Xeon Gold 6230t
Intel Xeon Gold 6234
Intel Xeon Gold 6238
Intel Xeon Gold 6238l
Intel Xeon Gold 6238r
Intel Xeon Gold 6238t
Intel Xeon Gold 6240
Intel Xeon Gold 6240l
Intel Xeon Gold 6240r
Intel Xeon Gold 6240y
Intel Xeon Gold 6242
Intel Xeon Gold 6242r
Intel Xeon Gold 6244
Intel Xeon Gold 6246
Intel Xeon Gold 6246r
Intel Xeon Gold 6248
Intel Xeon Gold 6248r
Intel Xeon Gold 6250
Intel Xeon Gold 6250l
Intel Xeon Gold 6252
Intel Xeon Gold 6252n
Intel Xeon Gold 6254
Intel Xeon Gold 6256
Intel Xeon Gold 6258r
Intel Xeon Gold 6262v
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u
Intel Xeon Gold 6326
Intel Xeon Gold 6328h
Intel Xeon Gold 6328hl
Intel Xeon Gold 6330
Intel Xeon Gold 6330h
Intel Xeon Gold 6330n
Intel Xeon Gold 6334
Intel Xeon Gold 6336y
Intel Xeon Gold 6338
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t
Intel Xeon Gold 6342
Intel Xeon Gold 6346
Intel Xeon Gold 6348
Intel Xeon Gold 6348h
Intel Xeon Gold 6354
Intel Xeon Platinum 8253
Intel Xeon Platinum 8256
Intel Xeon Platinum 8260
Intel Xeon Platinum 8260l
Intel Xeon Platinum 8260y
Intel Xeon Platinum 8268
Intel Xeon Platinum 8270
Intel Xeon Platinum 8276
Intel Xeon Platinum 8276l
Intel Xeon Platinum 8280
Intel Xeon Platinum 8280l
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352m
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8353h
Intel Xeon Platinum 8354h
Intel Xeon Platinum 8356h
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360h
Intel Xeon Platinum 8360hl
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8376h
Intel Xeon Platinum 8376hl
Intel Xeon Platinum 8380
Intel Xeon Platinum 8380h
Intel Xeon Platinum 8380hl
Intel Xeon Platinum 9221
Intel Xeon Platinum 9222
Intel Xeon Platinum 9242
Intel Xeon Platinum 9282
Intel Xeon Silver 4208
Intel Xeon Silver 4209t
Intel Xeon Silver 4210
Intel Xeon Silver 4210r
Intel Xeon Silver 4210t
Intel Xeon Silver 4214
Intel Xeon Silver 4214r
Intel Xeon Silver 4214y
Intel Xeon Silver 4215
Intel Xeon Silver 4215r
Intel Xeon Silver 4216
Intel Xeon Silver 4309y
Intel Xeon Silver 4310
Intel Xeon Silver 4310t
Intel Xeon Silver 4314
Intel Xeon Silver 4316
Intel Xeon W-10855
Intel Xeon W-10855m
Intel Xeon W-10885m
Intel Xeon W-11155mle
Intel Xeon W-11155mre
Intel Xeon W-11555mle
Intel Xeon W-11555mre
Intel Xeon W-11855m
Intel Xeon W-11865mld
Intel Xeon W-11865mre
Intel Xeon W-11955m
Intel Xeon W-1250
Intel Xeon W-1250p
Intel Xeon W-1270
Intel Xeon W-1270p
Intel Xeon W-1290
Intel Xeon W-1290e
Intel Xeon W-1290p
Intel Xeon W-1290t
Intel Xeon W-1290te
Intel Xeon W-1300
Intel Xeon W-1350
Intel Xeon W-1350p
Intel Xeon W-1370
Intel Xeon W-1370p
Intel Xeon W-1390
Intel Xeon W-1390p
Intel Xeon W-1390t
Intel Xeon W-2223
Intel Xeon W-2225
Intel Xeon W-2235
Intel Xeon W-2245
Intel Xeon W-2255
Intel Xeon W-2265
Intel Xeon W-2275
Intel Xeon W-2295
Intel Xeon W-3223
Intel Xeon W-3225
Intel Xeon W-3235
Intel Xeon W-3245
Intel Xeon W-3245m
Intel Xeon W-3265
Intel Xeon W-3265m
Intel Xeon W-3275
Intel Xeon W-3275m
Oracle Communications Cloud Native Core Binding Support Function=22.1.3
Oracle Communications Cloud Native Core Network Exposure Function=22.1.1
Oracle Communications Cloud Native Core Policy=22.2.0
debian/linux
5.10.223-1
5.10.226-1
6.1.115-1
6.1.119-1
6.11.10-1
6.12.5-1

Remedy

Disabling unprivileged eBPF effectively mitigates the known attack vectors for exploiting intra-mode branch injections attacks. The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. For the Red Hat Enterprise Linux 7 the eBPF for unprivileged users is always disabled. For the Red Hat Enterprise Linux 8 to confirm the current state, inspect the sysctl with the command: # cat /proc/sys/kernel/unprivileged_bpf_disabled The setting of 1 would mean that unprivileged users can not use eBPF, mitigating the flaw. Continue to enable SMEP and Enhanced IBRS. This is the default setting on eligible CPUs.

Remedy

To mitigate the primary known attack vector, disable unprivileged eBPF: $ sudo sysctl kernel.unprivileged_bpf_disabled=1 or $ sudo sysctl kernel.unprivileged_bpf_disabled=2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Parent vulnerabilities

(Appears in the following advisories)

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203