Reliance on undefined behavior in AMD products - CVE-2023-20592

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU84028

Reliance on undefined behavior in AMD products - CVE-2023-20592

Published: December 8, 2023


Vulnerability identifier: #VU84028
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-20592
CWE-ID: CWE-758
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to unexpected behavior of the INVD instruction in some AMD CPUs. A malicious hypervisor can affect cache line write-back behavior of the CPU and modify guest virtual machine (VM) memory.


Affected software

1st Gen AMD EPYC Processors
2nd Gen AMD EPYC Processors
3rd Gen AMD EPYC Processors
HPE ProLiant DL325 Gen10 Plus v2 server
HPE ProLiant DL385 Gen10 Plus server
HPE ProLiant DL385 Gen10 Plus v2 server
HPE ProLiant DX325 Gen10 Plus v2 server
HPE ProLiant DX385 Gen10 Plus v2 server
HPE ProLiant XL225n Gen10 Plus 1U Node
HPE ProLiant XL645d Gen10 Plus Server
HPE ProLiant XL675d Gen10 Plus Server
HPE ProLiant DL325 Gen10 Plus server
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
CentOS
Anolis OS
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
openSUSE Leap
Red Hat OpenShift Container Platform
IBM Qradar SIEM
Integrated Data protection Appliance (IDPA)
Data Protection Search
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
iwl5150-firmware
iwl5000-firmware
iwl6000-firmware
iwl3945-firmware
iwl2000-firmware
iwl105-firmware
iwl135-firmware
iwl2030-firmware
iwl6000g2a-firmware
iwl6000g2b-firmware
iwl3160-firmware
iwl7260-firmware
iwl100-firmware
iwl1000-firmware
iwl6050-firmware
iwl4965-firmware
linux-firmware (Red Hat package)
ucode-amd
kernel-firmware
linux-firmware
kernel-firmware-radeon
kernel-firmware-ath10k
kernel-firmware-i915
kernel-firmware-intel
kernel-firmware-mellanox
kernel-firmware-liquidio
kernel-firmware-nvidia
kernel-firmware-mwifiex
kernel-firmware-chelsio
kernel-firmware-media
kernel-firmware-usb-network
kernel-firmware-ath11k
kernel-firmware-qlogic
kernel-firmware-dpaa2
kernel-firmware-marvell
kernel-firmware-bnx2
kernel-firmware-nfp
kernel-firmware-atheros
kernel-firmware-sound
kernel-firmware-ti
kernel-firmware-network
kernel-firmware-iwlwifi
kernel-firmware-bluetooth
kernel-firmware-brcm
kernel-firmware-amdgpu
kernel-firmware-serial
kernel-firmware-realtek
kernel-firmware-ueagle
kernel-firmware-prestera
kernel-firmware-mediatek
kernel-firmware-all
kernel-firmware-platform
kernel-firmware-qcom
libertas-sd8686-firmware
libertas-sd8787-firmware
libertas-usb8388-firmware
libertas-usb8388-olpc-firmware
PowerFlex Appliance
PowerFlex rack
Storage Resource Manager
IBM QRadar Incident Forensics
Dell EMC Storage Monitoring and Reporting (SMR)
IBM Security Verify Access
IBM Power Hardware Management Console (HMC)

How to mitigate CVE-2023-20592

Install updates from vendor's website.

3rd Gen AMD EPYC Processors - update to MilanPI 1.0.0.C
Red Hat OpenShift Container Platform - update to 4.11.59
IBM Qradar SIEM - update to 7.5.0 Update Pack 10
PowerFlex Appliance - update to IC 45.374.00
Integrated Data protection Appliance (IDPA) - update to 2.7.8 with DP Search 19.6.6
HPE ProLiant DL325 Gen10 Plus v2 server - update to 2.90_10-27-2023
HPE ProLiant DL385 Gen10 Plus server - update to 2.90_10-27-2023
HPE ProLiant DL385 Gen10 Plus v2 server - update to 2.90_10-27-2023
HPE ProLiant DX325 Gen10 Plus v2 server - update to 2.90_10-27-2023
HPE ProLiant DX385 Gen10 Plus v2 server - update to 2.90_10-27-2023
HPE ProLiant XL225n Gen10 Plus 1U Node - update to 2.90_10-27-2023
HPE ProLiant XL645d Gen10 Plus Server - update to 2.90_10-27-2023
HPE ProLiant XL675d Gen10 Plus Server - update to 2.90_10-27-2023
HPE ProLiant DL325 Gen10 Plus server - update to 2.90_10-27-2023
PowerFlex rack - addressed in versions 3.6.6.0, 3.7.4.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.3
Storage Resource Manager - update to 4.10.0.3
IBM QRadar Incident Forensics - update to 7.5.0.10
iwl5150-firmware - addressed in versions 8.24.2.2-82, 8.24.2.2-121
iwl5000-firmware - addressed in versions 8.83.5.1_1-82, 8.83.5.1_1-121
iwl6000-firmware - addressed in versions 9.221.4.1-82, 9.221.4.1-121
IBM Security Verify Access - update to 10.0.9
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP3, 10.3.1060.0 SP1
iwl3945-firmware - addressed in versions 15.32.2.9-82, 15.32.2.9-121
iwl2000-firmware - addressed in versions 18.168.6.1-82, 18.168.6.1-121
iwl105-firmware - addressed in versions 18.168.6.1-82, 18.168.6.1-121
iwl135-firmware - addressed in versions 18.168.6.1-82, 18.168.6.1-121
iwl2030-firmware - addressed in versions 18.168.6.1-82, 18.168.6.1-121
iwl6000g2a-firmware - addressed in versions 18.168.6.1-82, 18.168.6.1-121
iwl6000g2b-firmware - addressed in versions 18.168.6.1-82, 18.168.6.1-121
Data Protection Search - update to 19.6.6
iwl3160-firmware - addressed in versions 25.30.13.0-82, 25.30.13.0-121
iwl7260-firmware - addressed in versions 25.30.13.0-82, 25.30.13.0-121
iwl100-firmware - addressed in versions 39.31.5.1-82, 39.31.5.1-121
iwl1000-firmware - addressed in versions 39.31.5.1-82, 39.31.5.1-121
iwl6050-firmware - addressed in versions 41.28.5.1-82, 41.28.5.1-121
iwl4965-firmware - addressed in versions 228.61.2.24-82, 228.61.2.24-121
linux-firmware (Red Hat package) - addressed in versions 20180911-69.3.git85c5d90.el7_6, 20190429-75.gitddde598.el7_7, 20200421-82.git78c0348.el7_9, 20220210-114.git6342082c.el8_6, 20240111-121.gitb3132c18.el8, 20240419-102.git055dfa8e.el8_2
ucode-amd - addressed in versions 20190618-5.34.1, 20200107-150100.3.40.1, 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware - addressed in versions 20190618-5.34.1, 20200107-150100.3.40.1, 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
linux-firmware - addressed in versions 20200421-82.git78c0348, 20240111-121.gitb3132c18
kernel-firmware-radeon - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ath10k - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-i915 - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-intel - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-mellanox - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-liquidio - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-nvidia - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-mwifiex - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-chelsio - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-media - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-usb-network - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ath11k - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-qlogic - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-dpaa2 - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-marvell - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-bnx2 - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-nfp - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-atheros - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-sound - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ti - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-network - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-iwlwifi - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-bluetooth - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-brcm - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-amdgpu - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-serial - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-realtek - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ueagle - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-prestera - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-mediatek - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-all - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-platform - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-qcom - addressed in versions 20220509-150400.4.25.1, 20230724-150500.3.9.1
libertas-sd8686-firmware - update to 20240111-121.gitb3132c18
libertas-sd8787-firmware - update to 20240111-121.gitb3132c18
libertas-usb8388-firmware - update to 20240111-121.gitb3132c18
libertas-usb8388-olpc-firmware - update to 20240111-121.gitb3132c18

External References

Related Security Bulletins