CVE-2022-37459: High severity ampere computing ampere altra firmware vulnerability
Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-37459?
CVE-2022-37459 is a vulnerability that allows attackers to control predictions for return addresses and potentially execute arbitrary code on Ampere Altra devices and Ampere Altra Max devices.
How can attackers exploit CVE-2022-37459?
Attackers can exploit CVE-2022-37459 using a side-channel attack known as "Retbleed" to hijack code flow and execute arbitrary code on vulnerable devices.
Which devices are affected by CVE-2022-37459?
Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a are affected by CVE-2022-37459.
What is the severity of CVE-2022-37459?
CVE-2022-37459 has a severity score of 7.8, indicating a high severity.
How can I fix CVE-2022-37459?
To fix CVE-2022-37459, it is recommended to update the firmware of Ampere Altra devices to version 1.08g or later, and Ampere Altra Max devices to version 2.05a or later.