CVE-2022-49611
published 2025-02-26CVE-2022-49611: In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning attacks with RSB. While at it, add a
bunch of comments to attempt to document the current state of tribal
knowledge about RSB attacks and what exactly is being mitigated.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < f744b88dfc201bf8092833ec70b23c720188b527 | f744b88dfc201bf8092833ec70b23c720188b527 |
| linux | linux | >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 17a9fc4a7b91f8599223631bb6ae6416bc0de1c0 | 17a9fc4a7b91f8599223631bb6ae6416bc0de1c0 |
| linux | linux | >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 4d7f72b6e1bc630bec7e4cd51814bc2b092bf153 | 4d7f72b6e1bc630bec7e4cd51814bc2b092bf153 |
| linux | linux | >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 8d5cff499a6d740c91ff37963907e0e983c37f0f | 8d5cff499a6d740c91ff37963907e0e983c37f0f |
| linux | linux | >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 8c38306e2e9257af4af2819aa287a4711ff36329 | 8c38306e2e9257af4af2819aa287a4711ff36329 |
| linux | linux | >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 9756bba28470722dacb79ffce554336dd1f6a6cd | 9756bba28470722dacb79ffce554336dd1f6a6cd |
| linux | linux | >= 3.16.56 < 3.17 | 3.17 |
| linux | linux | >= 3.2.101 < 3.3 | 3.3 |
| linux | linux | >= 4.14.14 < 4.14.297 | 4.14.297 |
| linux | linux | >= 4.4.113 < 4.5 | 4.5 |
| linux | linux | >= 4.9.77 < 4.10 | 4.10 |
| linux | linux | >= b9cdaaf0a3becc52e8b4662fef28c452c4f009b4 < 3d323b99ff5c8c57005184056d65f6af5b0479d8 | 3d323b99ff5c8c57005184056d65f6af5b0479d8 |
| linux | linux_kernel | < 4.14.297 | 4.14.297 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.136-1 | 5.10.136-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.15 < 4.19.266 | 4.19.266 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: x86/speculation: Fill RSB on vmexit for IBRS
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49611 [MEDIUM] CWE-1037 kernel: x86/speculation: Fill RSB on vmexit for IBRS
kernel: x86/speculation: Fill RSB on vmexit for IBRS
In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning attacks with RSB. While at it, add a
bunch of comments to attempt to document the current state of tribal
knowledge about RSB attacks and what exactly is being mitigated.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 9) - Fix deferred
Package: kernel-rt (Red Hat Ente
Debian
CVE-2022-49611: linux - In the Linux kernel, the following vulnerability has been resolved: x86/specula...
vendor_debian·2022·CVSS 5.5
CVE-2022-49611 [MEDIUM] CVE-2022-49611: linux - In the Linux kernel, the following vulnerability has been resolved: x86/specula...
In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.136-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
GHSA
GHSA-3v7p-2jr8-qj72: In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning att
ghsa_unreviewed·2025-10-23
CVE-2022-49611 [MEDIUM] GHSA-3v7p-2jr8-qj72: In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning att
In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning attacks with RSB. While at it, add a
bunch of comments to attempt to document the current state of tribal
knowledge about RSB attacks and what exactly is being mitigated.
OSV
CVE-2022-49611: In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attac
osv·2025-02-26·CVSS 5.5
CVE-2022-49611 [MEDIUM] CVE-2022-49611: In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attac
In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/17a9fc4a7b91f8599223631bb6ae6416bc0de1c0https://git.kernel.org/stable/c/3d323b99ff5c8c57005184056d65f6af5b0479d8https://git.kernel.org/stable/c/4d7f72b6e1bc630bec7e4cd51814bc2b092bf153https://git.kernel.org/stable/c/8c38306e2e9257af4af2819aa287a4711ff36329https://git.kernel.org/stable/c/8d5cff499a6d740c91ff37963907e0e983c37f0fhttps://git.kernel.org/stable/c/9756bba28470722dacb79ffce554336dd1f6a6cdhttps://git.kernel.org/stable/c/f744b88dfc201bf8092833ec70b23c720188b527
2025-02-26
Published