CVE-2023-20579: Medium severity amd ryzen 7 5700g firmware vulnerability
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20579?
CVE-2023-20579 is classified as a critical vulnerability due to improper access control that could lead to loss of integrity and availability.
How do I fix CVE-2023-20579?
To address CVE-2023-20579, update to the latest firmware version provided by AMD that resolves this vulnerability.
What systems are affected by CVE-2023-20579?
CVE-2023-20579 affects various AMD Ryzen firmware versions up to and including comboam4v2pi_1.2.0.c and comboam5_1.0.8.0.
What can happen if CVE-2023-20579 is exploited?
Exploitation of CVE-2023-20579 may allow an attacker with kernel mode access to bypass protections, potentially resulting in system compromise.
Is there a workaround for CVE-2023-20579?
There are no documented workarounds for CVE-2023-20579; upgrading firmware is the only mitigation.