Vulnerability · Published Nov 14, 2023 · Assigned by AMD
CVE-2023-20592
Medium 6.5
In plain English
A medium-severity security flaw in 1st Gen AMD EPYC™ Processors from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.0%top 36.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | iwl100-firmware | 39.31.5.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl1000-firmware | 1:39.31.5.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl105-firmware | 18.168.6.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl135-firmware | 18.168.6.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl2000-firmware | 18.168.6.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl2030-firmware | 18.168.6.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl3160-firmware | 1:25.30.13.0-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl3945-firmware | 15.32.2.9-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl4965-firmware | 228.61.2.24-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl5000-firmware | 8.83.5.1_1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl5150-firmware | 8.24.2.2-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl6000-firmware | 9.221.4.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl6000g2a-firmware | 18.168.6.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl6000g2b-firmware | 18.168.6.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl6050-firmware | 41.28.5.1-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | iwl7260-firmware | 1:25.30.13.0-121.el8.1 | ALSA-2024:3178 |
| AlmaLinux:8 | libertas-sd8686-firmware | 20240111-121.gitb3132c18.el8 | ALSA-2024:3178 |
| AlmaLinux:8 | libertas-sd8787-firmware | 20240111-121.gitb3132c18.el8 | ALSA-2024:3178 |
| AlmaLinux:8 | libertas-usb8388-firmware | 2:20240111-121.gitb3132c18.el8 | ALSA-2024:3178 |
| AlmaLinux:8 | libertas-usb8388-olpc-firmware | 20240111-121.gitb3132c18.el8 | ALSA-2024:3178 |
| AlmaLinux:8 | linux-firmware | 20240111-121.gitb3132c18.el8 | ALSA-2024:3178 |
| Debian:12 | amd64-microcode | 3.20230719.1~deb12u1 | DEBIAN-CVE-2023-20592 |
| Debian:13 | amd64-microcode | 3.20230719.1 | DEBIAN-CVE-2023-20592 |
| Debian:14 | amd64-microcode | 3.20230719.1 | DEBIAN-CVE-2023-20592 |
| Rocky Linux:8 | linux-firmware | 0:20240111-121.gitb3132c18.el8 | RLSA-2024:3178 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | 1st Gen AMD EPYC™ Processors | various |
| AMD | 2nd Gen AMD EPYC™ Processors | various |
| AMD | 3rd Gen AMD EPYC™ Processors | various |