CVEvulnerability
CVE-2023-20569
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-203
Description
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
Affected configurations
• fedoraproject fedora 37
• fedoraproject fedora 38
• debian debian linux 10.0
• debian debian linux 11.0
• debian debian linux 12.0
• amd ryzen 9 5950x firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 9 5900x firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 9 5900 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 9 pro 5945 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5800x3d firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5800x firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5800 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5700x firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 pro 5845 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 5600x3d firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 5600x firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 5600 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 pro 5645 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5700 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 5500 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 3 5100 firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5700g firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 7 5700ge firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 5600g firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 5 5600ge firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 3 5300g firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 3 5300ge firmware (< comboam4v2pi 1.2.0.b)
• amd ryzen 9 7950x3d firmware (< comboam5 1.0.8.0)
• amd ryzen 9 7950x firmware (< comboam5 1.0.8.0)
• amd ryzen 9 7900x3d firmware (< comboam5 1.0.8.0)
• amd ryzen 9 7900x firmware (< comboam5 1.0.8.0)
• amd ryzen 9 7900 firmware (< comboam5 1.0.8.0)
• amd ryzen 9 pro 7945 firmware (< comboam5 1.0.8.0)
• amd ryzen 7 7800x3d firmware (< comboam5 1.0.8.0)
• amd ryzen 7 7700x firmware (< comboam5 1.0.8.0)
• amd ryzen 7 7700 firmware (< comboam5 1.0.8.0)
• amd ryzen 7 pro 7745 firmware (< comboam5 1.0.8.0)
• amd ryzen 5 7600x firmware (< comboam5 1.0.8.0)
• amd ryzen 5 7600 firmware (< comboam5 1.0.8.0)
• amd ryzen 5 pro 7645 firmware (< comboam5 1.0.8.0)
• amd ryzen 5 7500f firmware (< comboam5 1.0.8.0)
• amd ryzen threadripper pro 5995wx firmware (< chagallwspi-swrx8 1.0.0.7)
• amd ryzen threadripper pro 5975wx firmware (< chagallwspi-swrx8 1.0.0.7)
• amd ryzen threadripper pro 5965wx firmware (< chagallwspi-swrx8 1.0.0.7)
• amd ryzen threadripper pro 5955wx firmware (< chagallwspi-swrx8 1.0.0.7)
• amd ryzen threadripper pro 5945wx firmware (< chagallwspi-swrx8 1.0.0.7)
• amd ryzen 7 5700u firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 5 5500u firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 3 5300u firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 9 5980hx firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 9 5980hs firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 9 5900hx firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 9 5900hs firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 7 5800h firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 7 5800hs firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 7 5825u firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 7 5800u firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 5 5600h firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 5 5600hs firmware (< cezannepi-fp6 1.0.0.fa)
• amd ryzen 5 5625u firmware (< cezannepi-fp6 1.0.0.fa)
… and 100 more
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- http://www.openwall.com/lists/oss-security/2023/08/08/4 Mailing List
- http://xenbits.xen.org/xsa/advisory-434.html Third Party Advisory
- https://comsec.ethz.ch/research/microarch/inception/ Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/ Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/ Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/ Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240605-0006/ security.netapp.com
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 Vendor Advisory
- https://www.debian.org/security/2023/dsa-5475 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/08/08/4 Mailing List
- http://xenbits.xen.org/xsa/advisory-434.html Third Party Advisory
- https://comsec.ethz.ch/research/microarch/inception/ Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/ Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/ Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/ Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240605-0006/ security.netapp.com
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 Vendor Advisory
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html www.amd.com
- https://www.debian.org/security/2023/dsa-5475 Third Party Advisory