Code injection in AMD 3rd Gen AMD EPYC™ Processors
Priority LOW 36CWE-94Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 8 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-94.
Summary
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00627 50th percentileScored 2026-11-07
Fix Partial 3rd Gen AMD EPYC™ Processors (AMD): Milan PI 1.0.0.D1st Gen AMD EPYC™ Processors (AMD): Naples PI 1.0.0.M+21 more productsRed Hat: 5 advisoriesRed Hat: 8 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | 3rd Gen AMD EPYC™ Processors | various to before Milan PI 1.0.0.D | Milan PI 1.0.0.D | Patch available | CNA |
| AMD | 1st Gen AMD EPYC™ Processors | various to before Naples PI 1.0.0.M | Naples PI 1.0.0.M | Patch available | CNA |
| AMD | 2nd Gen AMD EPYC™ Processors | various to before Rome PI 1.0.0.J | Rome PI 1.0.0.J | Patch available | CNA |
| AMD | 4th Gen AMD EPYC™ Processors | — | various | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 3000 | various and later | — | No fix listed | CNA |
| AMD | AMD EPYC™ Embedded 7002 | various and later | — | No fix listed | CNA |
| AMD | AMD EPYC™ Embedded 7003 | various and later | — | No fix listed | CNA |
| AMD | AMD EPYC™ Embedded 9003 | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded R1000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded R2000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded 5000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded 7000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded V1000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded V2000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded V3000 | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 3000 Series Desktop Processors | various and later | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | various to before ComboAM5PI 1.2.0.1 | ComboAM5PI 1.2.0.1 | Patch available | CNA |
| AMD | AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics | various to before ComboAM4v2PI 1.2.0.cb | ComboAM4v2PI 1.2.0.cb | Patch available | CNA |
| AMD | AMD Ryzen™ Threadripper™ 3000 Series Processors | various to before CastlePeakPI-SP3r3 1.0.0.B | CastlePeakPI-SP3r3 1.0.0.B | Patch available | CNA |
| AMD | AMD Ryzen™ Threadripper™ PRO Processors | various to before ChagallWSPI-sWRX8 1.0.0.8 | ChagallWSPI-sWRX8 1.0.0.8 | Patch available | CNA |
| AMD | AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | — | various | Patch available | CNA |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | various to before Picasso-FP5 1.0.1.2 | Picasso-FP5 1.0.1.2 | Patch available | CNA |
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics | various to before CezannePI-FP6 | CezannePI-FP6 | Patch available | CNA |
| AMD | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 7045 Series Mobile Processors | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | various to before MendocinoPI-FT6 1.0.0.7 | MendocinoPI-FT6 1.0.0.7 | Patch available | CNA |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics | — | various | Patch available | CNA |
| AMD | AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics | — | various | Patch available | CNA |
- 3rd Gen AMD EPYC™ Processors VendorAMD Affected various to before Milan PI 1.0.0.D Fixed in Milan PI 1.0.0.D Patch available CNA
- 1st Gen AMD EPYC™ Processors VendorAMD Affected various to before Naples PI 1.0.0.M Fixed in Naples PI 1.0.0.M Patch available CNA
- 2nd Gen AMD EPYC™ Processors VendorAMD Affected various to before Rome PI 1.0.0.J Fixed in Rome PI 1.0.0.J Patch available CNA
- 4th Gen AMD EPYC™ Processors VendorAMD Affected — Fixed in various Patch available CNA
- AMD EPYC™ Embedded 3000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD EPYC™ Embedded 7002 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD EPYC™ Embedded 7003 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD EPYC™ Embedded 9003 VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ Embedded R1000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded R2000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded 5000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded 7000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded V1000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded V2000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded V3000 VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ 3000 Series Desktop Processors VendorAMD Affected various and later Fixed in — No fix listed CNA
- AMD Ryzen™ 5000 Series Desktop Processors VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 7000 Series Desktop Processors VendorAMD Affected various to before ComboAM5PI 1.2.0.1 Fixed in ComboAM5PI 1.2.0.1 Patch available CNA
- AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics VendorAMD Affected various to before ComboAM4v2PI 1.2.0.cb Fixed in ComboAM4v2PI 1.2.0.cb Patch available CNA
- AMD Ryzen™ Threadripper™ 3000 Series Processors VendorAMD Affected various to before CastlePeakPI-SP3r3 1.0.0.B Fixed in CastlePeakPI-SP3r3 1.0.0.B Patch available CNA
- AMD Ryzen™ Threadripper™ PRO Processors VendorAMD Affected various to before ChagallWSPI-sWRX8 1.0.0.8 Fixed in ChagallWSPI-sWRX8 1.0.0.8 Patch available CNA
- AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors VendorAMD Affected — Fixed in various Patch available CNA
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics VendorAMD Affected various to before Picasso-FP5 1.0.1.2 Fixed in Picasso-FP5 1.0.1.2 Patch available CNA
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected various to before CezannePI-FP6 Fixed in CezannePI-FP6 Patch available CNA
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 7045 Series Mobile Processors VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics VendorAMD Affected various to before MendocinoPI-FT6 1.0.0.7 Fixed in MendocinoPI-FT6 1.0.0.7 Patch available CNA
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
- AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in various Patch available CNA
CPE names CISA-ADP · 34
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:amd:1st_gen_amd_epyc_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:h:amd:3rd_gen_amd_epyc_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:h:amd:2nd_gen_amd_epyc_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_3000_series_desktop_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:h:amd:4th_gen_amd_epyc_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:epyc_embedded_3000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:epyc_embedded_7002:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:epyc_embedded_7003:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:epyc_embedded_9003:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_embedded_r1000:*:*:*:*:*:*:*:* | — | — | AMD |
- cpe:2.3:h:amd:1st_gen_amd_epyc_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:h:amd:3rd_gen_amd_epyc_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:h:amd:2nd_gen_amd_epyc_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_3000_series_desktop_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:h:amd:4th_gen_amd_epyc_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:epyc_embedded_3000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:epyc_embedded_7002:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:epyc_embedded_7003:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:epyc_embedded_9003:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_embedded_r1000:*:*:*:*:*:*:*:* Versions — — ·AMD
Show 24 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:amd:ryzen_embedded_r2000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_embedded_7000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_embedded_5000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_embedded_v1000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_embedded_v3000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_embedded_v2000:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_7040_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_5000_series_desktop_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_5000_series_desktop_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_7000_desktop_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_4000_series_desktop_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_threadripper_3000_series_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_threadripper_pro_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_threadripper_pro_3000wx_series_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:athlon_3000_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_3000_series_desktop_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_4000_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_5000_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_7030_series-mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_7045_series_mobile_processors:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_6000_processors_with_radeongraphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_7020_processors_with_radeongraphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_7035_processors_with_radeongraphics:*:*:*:*:*:*:*:* | — | — | AMD |
| cpe:2.3:a:amd:ryzen_8000_series_processors_with_radeongraphics:*:*:*:*:*:*:*:* | — | — | AMD |
- cpe:2.3:a:amd:ryzen_embedded_r2000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_embedded_7000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_embedded_5000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_embedded_v1000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_embedded_v3000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_embedded_v2000:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_7040_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_5000_series_desktop_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_5000_series_desktop_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_7000_desktop_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_4000_series_desktop_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_threadripper_3000_series_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_threadripper_pro_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_threadripper_pro_3000wx_series_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:athlon_3000_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_3000_series_desktop_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_4000_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_5000_series_mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_7030_series-mobile_processors_with_radeon_graphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_7045_series_mobile_processors:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_6000_processors_with_radeongraphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_7020_processors_with_radeongraphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_7035_processors_with_radeongraphics:*:*:*:*:*:*:*:* Versions — — ·AMD
- cpe:2.3:a:amd:ryzen_8000_series_processors_with_radeongraphics:*:*:*:*:*:*:*:* Versions — — ·AMD
Remediation
- Fix · CNA 3rd Gen AMD EPYC™ Processors (AMD) Fixed in Milan PI 1.0.0.D
- Fix · CNA 1st Gen AMD EPYC™ Processors (AMD) Fixed in Naples PI 1.0.0.M
- Fix · CNA 2nd Gen AMD EPYC™ Processors (AMD) Fixed in Rome PI 1.0.0.J
- Fix · CNA 4th Gen AMD EPYC™ Processors (AMD) Fixed in various
- Fix · CNA AMD EPYC™ Embedded 9003 (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 5000 Series Desktop Processors (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 7000 Series Desktop Processors (AMD) Fixed in ComboAM5PI 1.2.0.1
- Fix · CNA AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics (AMD) Fixed in ComboAM4v2PI 1.2.0.cb
- Fix · CNA AMD Ryzen™ Threadripper™ 3000 Series Processors (AMD) Fixed in CastlePeakPI-SP3r3 1.0.0.B
- Fix · CNA AMD Ryzen™ Threadripper™ PRO Processors (AMD) Fixed in ChagallWSPI-sWRX8 1.0.0.8
- Fix · CNA AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors (AMD) Fixed in various
- Fix · CNA AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics (AMD) Fixed in Picasso-FP5 1.0.1.2
- Fix · CNA AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6
- Fix · CNA AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 7045 Series Mobile Processors (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (AMD) Fixed in MendocinoPI-FT6 1.0.0.7
- Fix · CNA AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (AMD) Fixed in various
- Fix · CNA AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics (AMD) Fixed in various
Red Hat 5 advisories
- RHSA-2024:7481 Released 2024-10-02 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware-39.31.5.1-124.el8_10.1, iwl1000-firmware-1:39.31.5.1-124.el8_10.1, iwl105-firmware-18.168.6.1-124.el8_10.1 +18
- RHSA-2024:5978 Released 2024-08-29 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux Server (v. 7 ELS) iwl100-firmware-39.31.5.1-84.el7_9, iwl1000-firmware-1:39.31.5.1-84.el7_9, iwl105-firmware-18.168.6.1-84.el7_9 +14
- RHSA-2024:5982 Released 2024-08-29 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux Server AUS (v. 7.7) iwl100-firmware-39.31.5.1-76.el7_7, iwl1000-firmware-1:39.31.5.1-76.el7_7, iwl105-firmware-18.168.6.1-76.el7_7 +15
Show 2 more Red Hat advisories
- RHSA-2024:5980 Released 2024-08-29 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) iwl100-firmware-39.31.5.1-131.el9_0, iwl1000-firmware-1:39.31.5.1-131.el9_0, iwl105-firmware-18.168.6.1-131.el9_0 +14
- RHSA-2024:5883 Released 2024-08-27 · Red Hat rating Moderatelinux-firmware security update
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) iwl100-firmware-39.31.5.1-102.2.el8_2.1, iwl1000-firmware-1:39.31.5.1-102.2.el8_2.1, iwl105-firmware-18.168.6.1-102.2.el8_2.1 +18
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix yet |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2024:7481 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | — |
| Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | Fixed | RHSA-2024:5883 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2024:5980 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.8) | Fixed | — |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | — |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2024:5978 |
| Red Hat Enterprise Linux Server AUS (v. 7.7) | Fixed | RHSA-2024:5982 |
Not affected: 1 product
- Red Hat Enterprise Linux 10
Timeline
- 2026-10-02 Threatist record created from CVE-2023-31315
- 2026-10-03 Alias added: GHSA-7r5c-r5ww-995h
- 2026-10-30 EPSS moved to the 50th–90th percentile
References
More AMD vulnerabilities
- TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
- TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
- TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
- TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
- TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-31315 · CVE Program
- CVE-2023-31315 · NVD
- FIRST EPSS
- GHSA-7r5c-r5ww-995h · GitHub Advisory Database · CC BY 4.0
- CVE-2023-31315 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences