Type Confusion in Microsoft Windows and Windows Server - CVE-2022-23816

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU65219

Type Confusion in Microsoft Windows and Windows Server - CVE-2022-23816

Published: July 12, 2022


Vulnerability identifier: #VU65219
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-23816
CWE-ID: CWE-843
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a branch type confusion. A local user can force the branch predictor to predict the wrong branch type and gain access to sensitive information.


Affected software

Microsoft Windows
Windows Server
Oracle Linux
Amazon Linux AMI
VMware ESXi
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
SUSE Linux Enterprise Storage
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
Xen
Dell Enterprise Hybrid Cloud
Solutions Enabler Virtual Appliance
IBM Cloud Pak System
Red Hat Advanced Cluster Management for Kubernetes
OpenShift Logging
Red Hat OpenShift Container Platform
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python-perf
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-headers
kernel-devel
kernel-debug-devel
kernel-debug
kernel
bpftool
kernel-abi-whitelists
kernel-doc
xen-doc-html
xen-tools-domU-debuginfo
xen-tools-domU
xen-tools-debuginfo
xen-tools
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-libs
xen-libs-32bit
xen-debugsource
xen
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
xen (Debian package)
kernel-core
kernel-cross-headers
kernel-debug-core
kernel-debug-modules
kernel-debug-modules-extra
kernel-modules
kernel-modules-extra
python3-perf
kernel-abi-stablelists
kernel-modules-internal
IBM Qradar SIEM
Dell EMC VxRail Appliance
Solutions Enabler
Unisphere 360
Unisphere for PowerMax
Unisphere for PowerMax Virtual Appliance
eVASA Provider Virtual Appliance
VASA Provider Standalone

How to mitigate CVE-2022-23816

Install updates from vendor's website.

VMware ESXi - addressed in versions ESXi650-202207401-SG, ESXi670-202207401-SG, ESXi70U3sf-20036586
IBM Cloud Pak System - update to 2.3.3.6
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.4.8, 2.6.2
Red Hat OpenShift Container Platform - update to 4.11.12
kernel (Red Hat package) - addressed in versions 3.10.0-1160.80.1.el7, 4.18.0-372.32.1.el8_6, 5.14.0-70.36.1.el9_0, 5.14.0-162.6.1.el9_1
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.80.1.rt56.1225.el7, 4.18.0-372.32.1.rt7.189.el8_6, 5.14.0-70.36.1.rt21.108.el9_0, 5.14.0-162.6.1.rt21.168.el9_1
OpenShift Logging - addressed in versions 5.3.13, 5.5.4
IBM Qradar SIEM - addressed in versions 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 IF01
python-perf - update to 3.10.0-1160.80.1.0.1
perf - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-tools-libs-devel - addressed in versions 3.10.0-1160.80.1.0.1, 5.10.134-12
kernel-tools-libs - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-tools - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-headers - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-devel - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-debug-devel - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-debug - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
bpftool - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1, 5.10.134-12
kernel-abi-whitelists - update to 3.10.0-1160.80.1.0.1
kernel-doc - addressed in versions 3.10.0-1160.80.1.0.1, 4.18.0-372.32.1
Dell Enterprise Hybrid Cloud - update to 4.1.2
Dell EMC VxRail Appliance - update to 4.5.490
xen-doc-html - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-tools-domU - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-tools-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-tools - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1
xen-libs - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-libs-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-debugsource - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-devel - addressed in versions 4.10.4_36-150000.3.77.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_04-150300.3.32.1, 4.16.1_06-150400.4.8.1
xen (Debian package) - update to 4.14.5+24-g87d90d511c-1
xen - addressed in versions 4.15.3-3.fc35, 4.15.3-4.fc35, 4.16.1-6.fc36
kernel-core - addressed in versions 4.18.0-372.32.1, 5.10.134-12
kernel-cross-headers - update to 4.18.0-372.32.1
kernel-debug-core - addressed in versions 4.18.0-372.32.1, 5.10.134-12
kernel-debug-modules - addressed in versions 4.18.0-372.32.1, 5.10.134-12
kernel-debug-modules-extra - addressed in versions 4.18.0-372.32.1, 5.10.134-12
kernel-modules - addressed in versions 4.18.0-372.32.1, 5.10.134-12
kernel-modules-extra - addressed in versions 4.18.0-372.32.1, 5.10.134-12
python3-perf - addressed in versions 4.18.0-372.32.1, 5.10.134-12
kernel-abi-stablelists - update to 4.18.0-372.32.1
kernel-modules-internal - update to 5.10.134-12
kernel - addressed in versions 5.18.11-100.fc35, 5.18.11-200.fc36
kernel - update to 6.1.10-15.42
Solutions Enabler Virtual Appliance - update to 9.2.3.5
Solutions Enabler - update to 9.2.3.5
Unisphere 360 - update to 9.2.3.8
Unisphere for PowerMax - update to 9.2.3.20
Unisphere for PowerMax Virtual Appliance - update to 9.2.3.20
eVASA Provider Virtual Appliance - update to 9.2.4.11
VASA Provider Standalone - update to 9.2.4.21

External References

Related Security Bulletins