Read the docs
TI-2023-07041 Aliases CVE-2023-20592GHSA-5prp-6h6f-f55f

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an…

Priority LOW 31Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 13 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01018 63rd percentileScored 2026-11-07
Fix Partial Red Hat: 10 advisoriesRed Hat: 13 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMD1st Gen AMD EPYC™ Processorsvarious —No fix listedCNA
AMD2nd Gen AMD EPYC™ Processorsvarious —No fix listedCNA
AMD3rd Gen AMD EPYC™ Processors various —No fix listedCNA
  • 1st Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
  • 2nd Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
  • 3rd Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA

CPE configurations NVD · 138

CPEVersionsRoleVendor
cpe:2.3:o:amd:epyc_7001_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7251_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7261_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7281_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7301_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:epyc_7001_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7251_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7261_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7281_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7301_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 128 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:amd:epyc_7351_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7351p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7371_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7401_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7401p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7451_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7501_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7551_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7551p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7601_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7232p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7252_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7262_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7272_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7282_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7302_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7302p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7352_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7402_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7402p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7452_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7502_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7502p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7532_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7542_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7552_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7642_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7662_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7702_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7702p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7742_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7f32_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7f52_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7f72_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7h12_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*before milanpi_1.0.0.cVulnerableAMD
cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:epyc_7351_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7351p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7371_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7401_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7401p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7451_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7501_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7551_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7551p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7601_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7232p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7252_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7262_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7272_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7282_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7302_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7302p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7352_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7402_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7402p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7452_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7502_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7502p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7532_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7542_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7552_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7642_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7662_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7702_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7702p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7742_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7f32_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7f52_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7f72_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7h12_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.c Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD

Remediation

Red Hat 10 advisories

  • RHSA-2024:4575 Released 2024-07-16 · Red Hat rating Important
    linux-firmware security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) iwl100-firmware-39.31.5.1-102.el8_2.1, iwl1000-firmware-1:39.31.5.1-102.el8_2.1, iwl105-firmware-18.168.6.1-102.el8_2.1 +18
  • RHSA-2024:3178 Released 2024-05-22 · Red Hat rating Important
    linux-firmware security update
    • Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware-39.31.5.1-121.el8.1, iwl1000-firmware-1:39.31.5.1-121.el8.1, iwl105-firmware-18.168.6.1-121.el8.1 +18
  • RHSA-2024:1112 Released 2024-03-05 · Red Hat rating Important
    linux-firmware security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) iwl100-firmware-39.31.5.1-114.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.el8_6.1, iwl105-firmware-18.168.6.1-114.el8_6.1 +18
Show 7 more Red Hat advisories
  • RHSA-2024:0979 Released 2024-02-27 · Red Hat rating Moderate
    linux-firmware security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) iwl100-firmware-39.31.5.1-75.el7_7, iwl1000-firmware-1:39.31.5.1-75.el7_7, iwl105-firmware-18.168.6.1-75.el7_7 +15
  • RHSA-2024:0978 Released 2024-02-26 · Red Hat rating Moderate
    linux-firmware security update
    • Red Hat Enterprise Linux Server AUS (v. 7.6) iwl100-firmware-39.31.5.1-69.3.el7_6, iwl1000-firmware-1:39.31.5.1-69.3.el7_6, iwl105-firmware-18.168.6.1-69.3.el7_6 +15
  • RHSA-2024:0753 Released 2024-02-09 · Red Hat rating Moderate
    linux-firmware security update
    • Red Hat Enterprise Linux Client (v. 7) iwl100-firmware-39.31.5.1-82.el7_9, iwl1000-firmware-1:39.31.5.1-82.el7_9, iwl105-firmware-18.168.6.1-82.el7_9 +14
    • Red Hat Enterprise Linux Server (v. 7) iwl100-firmware-39.31.5.1-82.el7_9, iwl1000-firmware-1:39.31.5.1-82.el7_9, iwl105-firmware-18.168.6.1-82.el7_9 +14
    • Red Hat Enterprise Linux Workstation (v. 7) iwl100-firmware-39.31.5.1-82.el7_9, iwl1000-firmware-1:39.31.5.1-82.el7_9, iwl105-firmware-18.168.6.1-82.el7_9 +14
  • RHSA-2024:0561 Released 2024-01-30 · Red Hat rating Moderate
    linux-firmware security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) iwl100-firmware-39.31.5.1-105.el8_4.1, iwl1000-firmware-1:39.31.5.1-105.el8_4.1, iwl105-firmware-18.168.6.1-105.el8_4.1 +18
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) iwl100-firmware-39.31.5.1-105.el8_4.1, iwl1000-firmware-1:39.31.5.1-105.el8_4.1, iwl105-firmware-18.168.6.1-105.el8_4.1 +18
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) iwl100-firmware-39.31.5.1-105.el8_4.1, iwl1000-firmware-1:39.31.5.1-105.el8_4.1, iwl105-firmware-18.168.6.1-105.el8_4.1 +18
  • RHSA-2023:5607 Released 2023-10-10 · Red Hat rating Moderate
    linux-firmware security and enhancement update
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) iwl100-firmware-39.31.5.1-128.el9_0, iwl1000-firmware-1:39.31.5.1-128.el9_0, iwl105-firmware-18.168.6.1-128.el9_0 +14
  • RHSA-2023:5245 Released 2023-09-19 · Red Hat rating Moderate
    linux-firmware security update
    • Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware-39.31.5.1-117.el8_8.1, iwl1000-firmware-1:39.31.5.1-117.el8_8.1, iwl105-firmware-18.168.6.1-117.el8_8.1 +18
  • RHSA-2023:5068 Released 2023-09-12 · Red Hat rating Moderate
    linux-firmware security update
    • Red Hat Enterprise Linux BaseOS (v. 9) iwl100-firmware-39.31.5.1-135.el9_2, iwl1000-firmware-1:39.31.5.1-135.el9_2, iwl105-firmware-18.168.6.1-135.el9_2 +14

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix yet
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:5245, RHSA-2024:3178
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:5068
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2024:4575
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2024:0561
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2024:0561
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:1112
Red Hat Enterprise Linux BaseOS EUS (v.9.0)Fixed RHSA-2023:5607
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2024:0561
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:0753
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:0753
Red Hat Enterprise Linux Server AUS (v. 7.6)Fixed RHSA-2024:0978
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2024:0979
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:0753

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-20592
  2. 2026-10-03 Alias added: GHSA-5prp-6h6f-f55f

References

  • TI-2021-08171 Out-of-bounds write in AMD EPYC™ 7001 Series Processors CVSS 3.1HIGH 8.2
  • TI-2022-12252 Mis-trained branch predictions for return instructions may allow arbitrary speculative… CVSS 3.1MEDIUM 6.5
  • TI-2021-08167 A malicious hypervisor in conjunction with an unprivileged attacker process inside an… CVSS 3.1HIGH 8.4
  • TI-2021-08217 Out-of-bounds write in AMD 1st Gen EPYC CVSS 3.1HIGH 7.8
  • TI-2021-08183 Time-of-check time-of-use race condition in AMD Ryzen™ 3000 Series Desktop Processors… CVSS 3.1HIGH 7.4
  • TI-2020-10295 A potential denial of service (DoS) vulnerability exists in the integrated chipset that… CVSS 3.1HIGH 7.5
See all 26 →

Sources