Vulnerability · Published Aug 8, 2023 · Assigned by AMD
CVE-2023-20569
Medium 4.7
In plain English
A medium-severity security flaw in Ryzen™ PRO 5000 Series Desktop Processors from . There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.3% (higher than 94% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)4.7Medium
Exploit odds (30 days)7.3%top 5.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | iwl100-firmware | 39.31.5.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl100-firmware | 39.31.5.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl1000-firmware | 1:39.31.5.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl1000-firmware | 1:39.31.5.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl105-firmware | 18.168.6.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl105-firmware | 18.168.6.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl135-firmware | 18.168.6.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl135-firmware | 18.168.6.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl2000-firmware | 18.168.6.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl2000-firmware | 18.168.6.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl2030-firmware | 18.168.6.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl2030-firmware | 18.168.6.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl3160-firmware | 1:25.30.13.0-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl3160-firmware | 1:25.30.13.0-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl3945-firmware | 15.32.2.9-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:8 | iwl4965-firmware | 228.61.2.24-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:8 | iwl5000-firmware | 8.83.5.1_1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl5000-firmware | 8.83.5.1_1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl5150-firmware | 8.24.2.2-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl5150-firmware | 8.24.2.2-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl6000-firmware | 9.221.4.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:8 | iwl6000g2a-firmware | 18.168.6.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl6000g2a-firmware | 18.168.6.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl6000g2b-firmware | 18.168.6.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl6000g2b-firmware | 18.168.6.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl6050-firmware | 41.28.5.1-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl6050-firmware | 41.28.5.1-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | iwl7260-firmware | 1:25.30.13.0-119.el8_9.1 | ALSA-2023:7109 |
| AlmaLinux:9 | iwl7260-firmware | 1:25.30.13.0-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | kernel | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-core | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-debug | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-devel | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-doc | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-modules | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-tools | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | libertas-sd8686-firmware | 20230824-119.git0e048b06.el8_9 | ALSA-2023:7109 |
| AlmaLinux:8 | libertas-sd8787-firmware | 20230824-119.git0e048b06.el8_9 | ALSA-2023:7109 |
| AlmaLinux:9 | libertas-sd8787-firmware | 20230814-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | libertas-usb8388-firmware | 2:20230824-119.git0e048b06.el8_9 | ALSA-2023:7109 |
| AlmaLinux:8 | libertas-usb8388-olpc-firmware | 20230824-119.git0e048b06.el8_9 | ALSA-2023:7109 |
| AlmaLinux:8 | linux-firmware | 20230824-119.git0e048b06.el8_9 | ALSA-2023:7109 |
| AlmaLinux:9 | linux-firmware | 20230814-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:9 | linux-firmware-whence | 20230814-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:9 | netronome-firmware | 20230814-140.el9_3 | ALSA-2023:6595 |
| AlmaLinux:8 | perf | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| AlmaLinux:8 | python3-perf | 4.18.0-513.11.1.el8_9 | ALSA-2024:0113 |
| Alpine:v3.20 | xen | 4.17.2-r0 | ALPINE-CVE-2023-20569 |
| Alpine:v3.21 | xen | 4.17.2-r0 | ALPINE-CVE-2023-20569 |
| Alpine:v3.22 | xen | 4.17.2-r0 | ALPINE-CVE-2023-20569 |
| Alpine:v3.23 | xen | 4.17.2-r0 | ALPINE-CVE-2023-20569 |
| Alpine:v3.24 | xen | 4.17.2-r0 | ALPINE-CVE-2023-20569 |
| Debian:12 | amd64-microcode | 3.20230719.1~deb12u1 | DEBIAN-CVE-2023-20569 |
| Debian:13 | amd64-microcode | 3.20230719.1 | DEBIAN-CVE-2023-20569 |
| Debian:14 | amd64-microcode | 3.20230719.1 | DEBIAN-CVE-2023-20569 |
| Debian:12 | linux | 6.1.38-4 | DSA-5475-1 |
| Debian:12 | linux | 6.1.38-4 | DEBIAN-CVE-2023-20569 |
| Debian:13 | linux | 6.4.4-3 | DEBIAN-CVE-2023-20569 |
| Debian:14 | linux | 6.4.4-3 | DEBIAN-CVE-2023-20569 |
| Rocky Linux:9 | kernel | 0:5.14.0-362.13.1.el9_3.cloud.0.3 | RXSA-2023:7749 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-513.11.1.rt7.313.el8_9 | RLSA-2024:0134 |
| Ubuntu:22.04:LTS | amd64-microcode | 3.20191218.1ubuntu2.2 | USN-6319-1 |
| Ubuntu:22.04:LTS | amd64-microcode | 3.20191218.1ubuntu2.2 | UBUNTU-CVE-2023-20569 |
| Ubuntu:24.04:LTS | amd64-microcode | 3.20230808.1.1ubuntu1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux | 5.15.0-112.122 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux | 5.15.0-86.96 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1047.52 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1063.69 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1013.13~22.04.1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1013.13~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1049.56 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1066.75 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1014.14~22.04.1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1014.14~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1049.56.1 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1067.76.1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | 6.2.0-1014.14~22.04.1.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1044.52 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1062.70 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1016.18~22.04.1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1016.18~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1044.49 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1060.66 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1046.53 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1030.35 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-34.34~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-34.34~22.04.1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1056.59 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1040.43 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1043.49 | USN-6445-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1058.64 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1044.49 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1060.65 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-110.120 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-86.95 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1014.14~22.04.1 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1014.14~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1037.37 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1058.59 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1011.11 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1011.11 | USN-6466-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1026.26 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1023.23 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1023.23 | USN-6415-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1061.67 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1045.51 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1058.61 | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1040.43 | USN-6416-3 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-20569 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1030.34 | UBUNTU-CVE-2023-20569 |
Affected products (as reported)
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 vendor-advisory
- http://xenbits.xen.org/xsa/advisory-434.html
- http://www.openwall.com/lists/oss-security/2023/08/08/4
- https://comsec.ethz.ch/research/microarch/inception/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html
- https://www.debian.org/security/2023/dsa-5475
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
- https://security.netapp.com/advisory/ntap-20240605-0006/
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html