Critical Vulnerability Information Vulnerability Name: Retbleed Vulnerability Description: Retbleed enables arbitrary speculative execution within the victim's context. Associated CVE IDs: - CVE-2022-23816 - CVE-2022-23825 - CVE-2022-29900 (AMD) - CVE-2022-29901 (Intel) Discoverers: Researchers from ETH Zurich Details Links: - Retbleed: https://comsec.ethz.ch/retbleed - AMD-related information: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037 Related Microarchitecture Behaviors: - AMD: - Retbleed is a specific instance of Branch Type Confusion. - Pipeline confusion affecting Retbleed and Branch Type Confusion is assigned CVE-2022-23816 and CVE-2022-23825. - Intel: - Uses CVE-2022-29900 for Retbleed. Discussion and Confirmation Question: Is it confirmed that AMD did not use CVE-2022-29900? Response: - AMD-sb-1037 references CVE-2022-23825 (Branch Type Confusion) and CVE-2022-29900 (RETbleed). - It is assumed AMD agrees to use CVE-2022-29900. - Whether Xen security advisory uses CVE-2022-23825 and CVE-2022-29901.