CVE-2023-20592: Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back…

medium6.5CVSS 3.1

AVNACLPRLUINSUCNIHAN

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.

Affected

33 ranges· showing 25

Vendor	Product	Version range	Fixed in
amd	1st_gen_amd_epyc_processors	—	—
amd	2nd_gen_amd_epyc_processors	—	—
amd	3rd_gen_amd_epyc_processors	—	—
amd	epyc_7203_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7203p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_72f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7303_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7303p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7313_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7313p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7343_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7373x_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_73f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7413_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7443_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7443p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7453_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7473x_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_74f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7513_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7543_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7543p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7573x_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_75f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7643_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

osv6.5MEDIUM