#VU96619 Permissions, Privileges, and Access Controls in AMD products - CVE-2023-31315

Vulnerability identifier: #VU96619

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-31315

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
AMD Ryzen Embedded V1000
1st Gen AMD EPYC Processors
2nd Gen AMD EPYC Processors
3rd Gen AMD EPYC Processors
4th Gen AMD EPYC Processors
AMD Instinct MI300A
AMD EPYC Embedded 3000
AMD EPYC Embedded 7002
AMD EPYC Embedded 7003
AMD EPYC Embedded 9003
AMD Ryzen Embedded R1000
AMD Ryzen Embedded R2000
AMD Ryzen Embedded 5000
AMD Ryzen Embedded 7000
AMD Ryzen Embedded V2000
AMD Ryzen Embedded V3000
AMD Ryzen 3000 Series Desktop processors
AMD Ryzen 5000 Series Desktop Processors
AMD Ryzen 5000 Series Desktop processor with Radeon graphics
AMD Ryzen 7000 Series Desktop Processors
AMD Ryzen 4000 Series Desktop processors with Radeon graphics
AMD Ryzen 8000 Series Processors with Radeon Graphics
AMD Ryzen Threadripper 3000 Series Processors
AMD Ryzen Threadripper 7000 Series Processors
AMD Ryzen Threadripper PRO processors
AMD Ryzen Threadripper PRO 3000WX Series Processors
AMD Athlon 3000 Series Mobile processors with Radeon Graphics
AMD Ryzen 3000 Series Mobile processor with Radeon graphics
AMD Ryzen 4000 Series Mobile processors with Radeon graphics
AMD Ryzen 5000 Series Mobile processors with Radeon graphics
AMD Ryzen 7020 Series Processors with Radeon Graphics
AMD Ryzen 6000 Series Processors with Radeon Graphics
AMD Ryzen 7035 Series Processors with Radeon Graphics
AMD Ryzen 5000 Series Processors with Radeon Graphics
AMD Ryzen 7030 Series Mobile Processors with Radeon Graphics
AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics
AMD Ryzen Series Mobile Processors with Radeon Graphics
AMD Ryzen 7045 Series Mobile Processors

Software vendor:
AMD

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper validation in a model specific register (MSR). A malicious application with ring0 access can modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Install updates from vendor's website.

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html