CVE-2023-20593: A use-after-free in AMD Zen2 Processors

Published Jun 27, 2023
·
Updated

AMD Ryzen, Gen AMD EPYC Processors could allow a local authenticated attacker to obtain sensitive information, caused by a use-after-free flaw in the vzeroupper instruction. By conducting a cache timing attack using a specially crafted application, an attacker could exploit this vulnerability to obtain sensitive data used by other processes, such as passwords and encryption keys, at a rate of 30KB/sec from each CPU core.

Other sources

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

— Launchpad

Affected Software

443 affected componentsFixes available
debian/amd64-microcode<=3.20191218.1, <=3.20230414.1
3.20230719.13.20230719.1~deb12u13.20230719.1~deb11u1
IBM Security Verify Governance, Identity Manager software component<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager virtual appliance component<=ISVG 10.0.2
XEN Xen=4.15.0
XEN Xen=4.17.0
XEN Xen=4.16.0
XEN Xen=4.14.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Debian Debian Linux=12.0
All of the following
AMD Ryzen 3 3100 Firmware
AMD Ryzen 3 3100
All of the following
AMD Ryzen 3 3300x Firmware
AMD Ryzen 3 3300x
All of the following
AMD Ryzen 5 3500 Firmware
AMD Ryzen 5 3500
All of the following
AMD Ryzen 5 3500x Firmware
AMD Ryzen 5 3500x
All of the following
AMD Ryzen 5 3600 Firmware
AMD Ryzen 5 3600
All of the following
AMD Ryzen 5 3600x Firmware
AMD Ryzen 5 3600x
All of the following
AMD Ryzen 5 3600xt Firmware
AMD Ryzen 5 3600xt
All of the following
AMD Ryzen 7 3700x Firmware
AMD Ryzen 7 3700x
All of the following
AMD Ryzen 7 3800x Firmware
AMD Ryzen 7 3800x
All of the following
AMD Ryzen 7 3800xt Firmware
AMD Ryzen 7 3800xt
All of the following
AMD Ryzen 9 3900 Firmware
AMD Ryzen 9 3900
All of the following
AMD Ryzen 9 3900x Firmware
AMD Ryzen 9 3900x
All of the following
AMD Ryzen 9 3900xt Firmware
AMD Ryzen 9 3900xt
All of the following
AMD Ryzen 9 3950x Firmware
AMD Ryzen 9 3950x
All of the following
AMD Ryzen 9 Pro 3900 Firmware
AMD Ryzen 9 Pro 3900
All of the following
AMD Ryzen Threadripper Pro 3995wx Firmware
AMD Ryzen Threadripper Pro 3995wx
All of the following
AMD Ryzen Threadripper Pro 3975wx Firmware
AMD Ryzen Threadripper Pro 3975wx
All of the following
AMD Ryzen Threadripper Pro 3955wx Firmware
AMD Ryzen Threadripper Pro 3955wx
All of the following
AMD Ryzen Threadripper Pro 3945wx Firmware
AMD Ryzen Threadripper Pro 3945wx
All of the following
AMD Ryzen Threadripper 3990x Firmware
AMD Ryzen Threadripper 3990x
All of the following
AMD Ryzen Threadripper 3970x Firmware
AMD Ryzen Threadripper 3970x
All of the following
AMD Ryzen Threadripper 3960x Firmware
AMD Ryzen Threadripper 3960x
All of the following
AMD Ryzen 7 4700g Firmware
AMD Ryzen 7 4700g
All of the following
AMD Ryzen 7 4700ge Firmware
AMD Ryzen 7 4700ge
All of the following
AMD Ryzen 5 4600g Firmware
AMD Ryzen 5 4600g
All of the following
AMD Ryzen 5 4600ge Firmware
AMD Ryzen 5 4600ge
All of the following
AMD Ryzen 3 4300g Firmware
AMD Ryzen 3 4300g
All of the following
AMD Ryzen 3 4300ge Firmware
AMD Ryzen 3 4300ge
All of the following
AMD Ryzen 3 Pro 4450u Firmware
AMD Ryzen 3 Pro 4450u
All of the following
AMD Ryzen 3 Pro 4350ge Firmware
AMD Ryzen 3 Pro 4350ge
All of the following
AMD Ryzen 3 Pro 4350g Firmware
AMD Ryzen 3 Pro 4350g
All of the following
AMD Ryzen 3 Pro 4200g Firmware
AMD Ryzen 3 Pro 4200g
All of the following
AMD Ryzen 5 Pro 4650ge Firmware
AMD Ryzen 5 Pro 4650ge
All of the following
AMD Ryzen 5 Pro 4650g Firmware
AMD Ryzen 5 Pro 4650g
All of the following
AMD Ryzen 5 Pro 4400g Firmware
AMD Ryzen 5 Pro 4400g
All of the following
AMD Ryzen 7 Pro 4750u Firmware
AMD Ryzen 7 Pro 4750u
All of the following
AMD Ryzen 7 Pro 4750ge Firmware
AMD Ryzen 7 Pro 4750ge
All of the following
AMD Ryzen 7 Pro 4750g Firmware
AMD Ryzen 7 Pro 4750g
All of the following
AMD Ryzen 7 5700u Firmware
AMD Ryzen 7 5700u
All of the following
AMD Ryzen 5 5500u Firmware
AMD Ryzen 5 5500u
All of the following
AMD Ryzen 3 5300u Firmware
AMD Ryzen 3 5300u
All of the following
AMD Ryzen 5 7520u Firmware
AMD Ryzen 5 7520u
All of the following
AMD Ryzen 3 7320u Firmware
AMD Ryzen 3 7320u
All of the following
AMD Athlon Gold 7220u Firmware
AMD Athlon Gold 7220u
All of the following
AMD Epyc 7232p Firmware
AMD Epyc 7232p
All of the following
AMD Epyc 7302p Firmware
AMD Epyc 7302p
All of the following
AMD Epyc 7402p Firmware
AMD Epyc 7402p
All of the following
AMD Epyc 7502p Firmware
AMD Epyc 7502p
All of the following
AMD Epyc 7702p Firmware
AMD Epyc 7702p
All of the following
AMD Epyc 7252 Firmware
AMD Epyc 7252
All of the following
AMD Epyc 7262 Firmware
AMD Epyc 7262
All of the following
AMD Epyc 7272 Firmware
AMD Epyc 7272
All of the following
AMD Epyc 7282 Firmware
AMD Epyc 7282
All of the following
AMD Epyc 7302 Firmware
AMD Epyc 7302
All of the following
AMD Epyc 7352 Firmware
AMD Epyc 7352
All of the following
AMD Epyc 7402 Firmware
AMD Epyc 7402
All of the following
AMD Epyc 7452 Firmware
AMD Epyc 7452
All of the following
AMD Epyc 7502 Firmware
AMD Epyc 7502
All of the following
AMD Epyc 7532 Firmware
AMD Epyc 7532
All of the following
AMD Epyc 7542 Firmware
AMD Epyc 7542
All of the following
AMD Epyc 7552 Firmware
AMD Epyc 7552
All of the following
AMD Epyc 7642 Firmware
AMD Epyc 7642
All of the following
AMD Epyc 7662 Firmware
AMD Epyc 7662
All of the following
AMD Epyc 7702 Firmware
AMD Epyc 7702
All of the following
AMD Epyc 7742 Firmware
AMD Epyc 7742
All of the following
AMD Epyc 7h12 Firmware
AMD Epyc 7h12
All of the following
AMD Epyc 7f32 Firmware
AMD Epyc 7f32
All of the following
AMD Epyc 7f52 Firmware
AMD Epyc 7f52
All of the following
AMD Epyc 7f72 Firmware
AMD Epyc 7f72
AMD Ryzen 3 3100 Firmware
AMD Ryzen 3 3100
AMD Ryzen 3 3300x Firmware
AMD Ryzen 3 3300x
AMD Ryzen 5 3500 Firmware
AMD Ryzen 5 3500
AMD Ryzen 5 3500x Firmware
AMD Ryzen 5 3500x
AMD Ryzen 5 3600 Firmware
AMD Ryzen 5 3600
AMD Ryzen 5 3600x Firmware
AMD Ryzen 5 3600x
AMD Ryzen 5 3600xt Firmware
AMD Ryzen 5 3600xt
AMD Ryzen 7 3700x Firmware
AMD Ryzen 7 3700x
AMD Ryzen 7 3800x Firmware
AMD Ryzen 7 3800x
AMD Ryzen 7 3800xt Firmware
AMD Ryzen 7 3800xt
AMD Ryzen 9 3900 Firmware
AMD Ryzen 9 3900
AMD Ryzen 9 3900x Firmware
AMD Ryzen 9 3900x
AMD Ryzen 9 3900xt Firmware
AMD Ryzen 9 3900xt
AMD Ryzen 9 3950x Firmware
AMD Ryzen 9 3950x
AMD Ryzen 9 Pro 3900 Firmware
AMD Ryzen 9 Pro 3900
AMD Ryzen Threadripper Pro 3995wx Firmware
AMD Ryzen Threadripper Pro 3995wx
AMD Ryzen Threadripper Pro 3975wx Firmware
AMD Ryzen Threadripper Pro 3975wx
AMD Ryzen Threadripper Pro 3955wx Firmware
AMD Ryzen Threadripper Pro 3955wx
AMD Ryzen Threadripper Pro 3945wx Firmware
AMD Ryzen Threadripper Pro 3945wx
AMD Ryzen Threadripper 3990x Firmware
AMD Ryzen Threadripper 3990x
AMD Ryzen Threadripper 3970x Firmware
AMD Ryzen Threadripper 3970x
AMD Ryzen Threadripper 3960x Firmware
AMD Ryzen Threadripper 3960x
AMD Ryzen 7 4700g Firmware
AMD Ryzen 7 4700g
AMD Ryzen 7 4700ge Firmware
AMD Ryzen 7 4700ge
AMD Ryzen 5 4600g Firmware
AMD Ryzen 5 4600g
AMD Ryzen 5 4600ge Firmware
AMD Ryzen 5 4600ge
AMD Ryzen 3 4300g Firmware
AMD Ryzen 3 4300g
AMD Ryzen 3 4300ge Firmware
AMD Ryzen 3 4300ge
AMD Ryzen 3 Pro 4450u Firmware
AMD Ryzen 3 Pro 4450u
AMD Ryzen 3 Pro 4350ge Firmware
AMD Ryzen 3 Pro 4350ge
AMD Ryzen 3 Pro 4350g Firmware
AMD Ryzen 3 Pro 4350g
AMD Ryzen 3 Pro 4200g Firmware
AMD Ryzen 3 Pro 4200g
AMD Ryzen 5 Pro 4650ge Firmware
AMD Ryzen 5 Pro 4650ge
AMD Ryzen 5 Pro 4650g Firmware
AMD Ryzen 5 Pro 4650g
AMD Ryzen 5 Pro 4400g Firmware
AMD Ryzen 5 Pro 4400g
AMD Ryzen 7 Pro 4750u Firmware
AMD Ryzen 7 Pro 4750u
AMD Ryzen 7 Pro 4750ge Firmware
AMD Ryzen 7 Pro 4750ge
AMD Ryzen 7 Pro 4750g Firmware
AMD Ryzen 7 Pro 4750g
AMD Ryzen 7 5700u Firmware
AMD Ryzen 7 5700u
AMD Ryzen 5 5500u Firmware
AMD Ryzen 5 5500u
AMD Ryzen 3 5300u Firmware
AMD Ryzen 3 5300u
AMD Ryzen 5 7520u Firmware
AMD Ryzen 5 7520u
AMD Ryzen 3 7320u Firmware
AMD Ryzen 3 7320u
AMD Athlon Gold 7220u Firmware
AMD Athlon Gold 7220u
AMD Epyc 7232p Firmware
AMD Epyc 7232p
AMD Epyc 7302p Firmware
AMD Epyc 7302p
AMD Epyc 7402p Firmware
AMD Epyc 7402p
AMD Epyc 7502p Firmware
AMD Epyc 7502p
AMD Epyc 7702p Firmware
AMD Epyc 7702p
AMD Epyc 7252 Firmware
AMD Epyc 7252
AMD Epyc 7262 Firmware
AMD Epyc 7262
AMD Epyc 7272 Firmware
AMD Epyc 7272
AMD Epyc 7282 Firmware
AMD Epyc 7282
AMD Epyc 7302 Firmware
AMD Epyc 7302
AMD Epyc 7352 Firmware
AMD Epyc 7352
AMD Epyc 7402 Firmware
AMD Epyc 7402
AMD Epyc 7452 Firmware
AMD Epyc 7452
AMD Epyc 7502 Firmware
AMD Epyc 7502
AMD Epyc 7532 Firmware
AMD Epyc 7532
AMD Epyc 7542 Firmware
AMD Epyc 7542
AMD Epyc 7552 Firmware
AMD Epyc 7552
AMD Epyc 7642 Firmware
AMD Epyc 7642
AMD Epyc 7662 Firmware
AMD Epyc 7662
AMD Epyc 7702 Firmware
AMD Epyc 7702
AMD Epyc 7742 Firmware
AMD Epyc 7742
AMD Epyc 7h12 Firmware
AMD Epyc 7h12
AMD Epyc 7f32 Firmware
AMD Epyc 7f32
AMD Epyc 7f52 Firmware
AMD Epyc 7f52
AMD Epyc 7f72 Firmware
AMD Epyc 7f72
debian/amd64-microcode
3.20250311.1~deb12u13.20230719.1~deb12u13.20250311.13.20251202.13.20260923.1
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
ubuntu/linux-aws<4.4.0-1125.131
4.4.0-1125.131
ubuntu/linux-azure<4.15.0-1169.184~14.04.1
4.15.0-1169.184~14.04.1
ubuntu/linux-lts-xenial<4.4.0-248.282~14.04.1
4.4.0-248.282~14.04.1
ubuntu/amd64-microcode*
ubuntu/linux*
ubuntu/amd64-microcode<3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1
3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1
ubuntu/linux<4.4.0-248.282
4.4.0-248.282
ubuntu/linux-aws<4.4.0-1163.178
4.4.0-1163.178
ubuntu/linux-aws-hwe<4.15.0-1160.173~16.04.1
4.15.0-1160.173~16.04.1
ubuntu/linux-azure<4.15.0-1169.184~16.04.1
4.15.0-1169.184~16.04.1
ubuntu/linux-gcp<4.15.0-1154.171~16.04.1
4.15.0-1154.171~16.04.1
ubuntu/linux-hwe<4.15.0-216.227~16.04.1
4.15.0-216.227~16.04.1
ubuntu/linux-kvm<4.4.0-1126.136
4.4.0-1126.136
ubuntu/linux-oracle<4.15.0-1123.134~16.04.1
4.15.0-1123.134~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1095.102
4.4.0-1095.102
ubuntu/linux-fips*
ubuntu/amd64-microcode<3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1
3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1
ubuntu/linux<4.15.0-216.227
4.15.0-216.227
ubuntu/linux-aws<4.15.0-1160.173
4.15.0-1160.173
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4<5.4.0-1108.116~18.04.1
5.4.0-1108.116~18.04.1
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1169.184
4.15.0-1169.184
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1115.122~18.04.1
5.4.0-1115.122~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1154.171
4.15.0-1154.171
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1111.120~18.04.1
5.4.0-1111.120~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-159.176~18.04.1
5.4.0-159.176~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1056.61~18.04.1
5.4.0-1056.61~18.04.1
ubuntu/linux-kvm<4.15.0-1144.149
4.15.0-1144.149
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1123.134
4.15.0-1123.134
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1107.116~18.04.1
5.4.0-1107.116~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1092.103~18.04.1
5.4.0-1092.103~18.04.1
ubuntu/linux-aws-fips<4.15.0-2099.105
4.15.0-2099.105
ubuntu/linux-azure-fips<4.15.0-2078.84
4.15.0-2078.84
ubuntu/linux-fips<4.15.0-1115.126
4.15.0-1115.126
ubuntu/linux-gcp-fips<4.15.0-2062.67
4.15.0-2062.67
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/amd64-microcode<3.20191218.1ubuntu1.1
3.20191218.1ubuntu1.1
ubuntu/linux<5.4.0-159.176
5.4.0-159.176
ubuntu/linux-aws<5.4.0-1108.116
5.4.0-1108.116
ubuntu/linux-aws-5.15<5.15.0-1043.48~20.04.1
5.15.0-1043.48~20.04.1
ubuntu/linux-azure<5.4.0-1114.120
5.4.0-1114.120
ubuntu/linux-azure-5.15<5.15.0-1045.52~20.04.1
5.15.0-1045.52~20.04.1
ubuntu/linux-bluefield<5.4.0-1070.76
5.4.0-1070.76
ubuntu/linux-gcp<5.4.0-1111.120
5.4.0-1111.120
ubuntu/linux-gcp-5.15<5.15.0-1040.48~20.04.1
5.15.0-1040.48~20.04.1
ubuntu/linux-gkeop<5.4.0-1075.79
5.4.0-1075.79
ubuntu/linux-gkeop-5.15<5.15.0-1026.31~20.04.1
5.15.0-1026.31~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-82.91~20.04.1
5.15.0-82.91~20.04.1
ubuntu/linux-ibm<5.4.0-1056.61
5.4.0-1056.61
ubuntu/linux-ibm-5.15<5.15.0-1036.39~20.04.1
5.15.0-1036.39~20.04.1
ubuntu/linux-intel-iotg-5.15<5.15.0-1038.43~20.04.1
5.15.0-1038.43~20.04.1
ubuntu/linux-iot<5.4.0-1021.22
5.4.0-1021.22
ubuntu/linux-kvm<5.4.0-1097.103
5.4.0-1097.103
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-82.91~20.04.1
5.15.0-82.91~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1017.17~20.04.1
5.15.0-1017.17~20.04.1
ubuntu/linux-oracle<5.4.0-1107.116
5.4.0-1107.116
ubuntu/linux-oracle-5.15<5.15.0-1041.47~20.04.1
5.15.0-1041.47~20.04.1
ubuntu/linux-raspi<5.4.0-1092.103
5.4.0-1092.103
ubuntu/linux-riscv-5.15<5.15.0-1039.43~20.04.2
5.15.0-1039.43~20.04.2
ubuntu/linux-xilinx-zynqmp<5.4.0-1028.32
5.4.0-1028.32
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1108.116+fips1
5.4.0-1108.116+fips1
ubuntu/linux-azure-fips<5.4.0-1114.120+fips1
5.4.0-1114.120+fips1
ubuntu/linux-fips<5.4.0-1083.92
5.4.0-1083.92
ubuntu/linux-gcp-fips<5.4.0-1111.120+fips1
5.4.0-1111.120+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/amd64-microcode<3.20191218.1ubuntu2.1
3.20191218.1ubuntu2.1
ubuntu/linux<5.15.0-82.91
5.15.0-82.91
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1043.48
5.15.0-1043.48
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2<6.2.0-1010.10~22.04.1
6.2.0-1010.10~22.04.1
ubuntu/linux-azure<5.15.0-1045.52
5.15.0-1045.52
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2<6.2.0-1011.11~22.04.1
6.2.0-1011.11~22.04.1
ubuntu/linux-azure-fde<5.15.0-1045.52.1
5.15.0-1045.52.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-gcp<5.15.0-1040.48
5.15.0-1040.48
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2<6.2.0-1012.12~22.04.1
6.2.0-1012.12~22.04.1
ubuntu/linux-gke<5.15.0-1040.45
5.15.0-1040.45
ubuntu/linux-gkeop<5.15.0-1026.31
5.15.0-1026.31
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2<6.2.0-31.31~22.04.1
6.2.0-31.31~22.04.1
ubuntu/linux-ibm<5.15.0-1036.39
5.15.0-1036.39
ubuntu/linux-intel-iotg<5.15.0-1038.43
5.15.0-1038.43
ubuntu/linux-kvm<5.15.0-1040.45
5.15.0-1040.45
ubuntu/linux-lowlatency<5.15.0-82.91
5.15.0-82.91
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2<6.2.0-1011.11~22.04.1
6.2.0-1011.11~22.04.1
ubuntu/linux-nvidia<5.15.0-1031.31
5.15.0-1031.31
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-tegra<5.15.0-1017.17
5.15.0-1017.17
ubuntu/linux-nvidia-tegra-igx<5.15.0-1004.4
5.15.0-1004.4
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0<6.0.0-1021.21
6.0.0-1021.21
ubuntu/linux-oem-6.1<6.1.0-1020.20
6.1.0-1020.20
ubuntu/linux-oracle<5.15.0-1041.47
5.15.0-1041.47
ubuntu/linux-raspi<5.15.0-1036.39
5.15.0-1036.39
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-starfive-5.19*
ubuntu/linux-xilinx-zynqmp<5.15.0-1025.29
5.15.0-1025.29
ubuntu/linux-bluefield<5.15.0-1022.24
5.15.0-1022.24
ubuntu/linux-intel-iot-realtime<5.15.0-1037.39
5.15.0-1037.39
ubuntu/linux-realtime<5.15.0-1044.49
5.15.0-1044.49
ubuntu/linux-fips*
ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/amd64-microcode to a version that resolves this vulnerability.

    Fixed in 3.20230719.1Fixed in 3.20230719.1~deb12u1Fixed in 3.20230719.1~deb11u1
  2. Upgrade

    Upgrade debian/amd64-microcode to a version that resolves this vulnerability.

    Fixed in 3.20250311.1~deb12u1Fixed in 3.20230719.1~deb12u1Fixed in 3.20250311.1Fixed in 3.20251202.1Fixed in 3.20260923.1
  3. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
  4. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1125.131
  5. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1169.184~14.04.1
  6. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-248.282~14.04.1
  7. Upgrade

    Upgrade ubuntu/amd64-microcode to a version that resolves this vulnerability.

    Fixed in 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1
  8. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-248.282
  9. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1163.178
  10. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1160.173~16.04.1
  11. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1169.184~16.04.1
  12. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1154.171~16.04.1
  13. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-216.227~16.04.1
  14. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1126.136
  15. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1123.134~16.04.1
  16. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1095.102
  17. Upgrade

    Upgrade ubuntu/amd64-microcode to a version that resolves this vulnerability.

    Fixed in 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1
  18. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-216.227
  19. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1160.173
  20. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1108.116~18.04.1
  21. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1169.184
  22. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1115.122~18.04.1
  23. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1154.171
  24. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1111.120~18.04.1
  25. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-159.176~18.04.1
  26. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1056.61~18.04.1
  27. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1144.149
  28. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1123.134
  29. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1107.116~18.04.1
  30. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1092.103~18.04.1
  31. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2099.105
  32. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2078.84
  33. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1115.126
  34. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2062.67
  35. Upgrade

    Upgrade ubuntu/amd64-microcode to a version that resolves this vulnerability.

    Fixed in 3.20191218.1ubuntu1.1
  36. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-159.176
  37. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1108.116
  38. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1043.48~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1114.120
  40. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1045.52~20.04.1
  41. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1070.76
  42. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1111.120
  43. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.48~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1075.79
  45. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.31~20.04.1
  46. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-82.91~20.04.1
  47. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1056.61
  48. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1036.39~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1038.43~20.04.1
  50. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1021.22
  51. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1097.103
  52. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-82.91~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1017.17~20.04.1
  54. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1107.116
  55. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1041.47~20.04.1
  56. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1092.103
  57. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1039.43~20.04.2
  58. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1028.32
  59. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1108.116+fips1
  60. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1114.120+fips1
  61. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1083.92
  62. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1111.120+fips1
  63. Upgrade

    Upgrade ubuntu/amd64-microcode to a version that resolves this vulnerability.

    Fixed in 3.20191218.1ubuntu2.1
  64. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-82.91
  65. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1043.48
  66. Upgrade

    Upgrade ubuntu/linux-aws-6.2 to a version that resolves this vulnerability.

    Fixed in 6.2.0-1010.10~22.04.1
  67. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1045.52
  68. Upgrade

    Upgrade ubuntu/linux-azure-6.2 to a version that resolves this vulnerability.

    Fixed in 6.2.0-1011.11~22.04.1
  69. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1045.52.1
  70. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.48
  71. Upgrade

    Upgrade ubuntu/linux-gcp-6.2 to a version that resolves this vulnerability.

    Fixed in 6.2.0-1012.12~22.04.1
  72. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.45
  73. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.31
  74. Upgrade

    Upgrade ubuntu/linux-hwe-6.2 to a version that resolves this vulnerability.

    Fixed in 6.2.0-31.31~22.04.1
  75. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1036.39
  76. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1038.43
  77. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.45
  78. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-82.91
  79. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.2 to a version that resolves this vulnerability.

    Fixed in 6.2.0-1011.11~22.04.1
  80. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1031.31
  81. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1017.17
  82. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1004.4
  83. Upgrade

    Upgrade ubuntu/linux-oem-6.0 to a version that resolves this vulnerability.

    Fixed in 6.0.0-1021.21
  84. Upgrade

    Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.

    Fixed in 6.1.0-1020.20
  85. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1041.47
  86. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1036.39
  87. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.29
  88. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1022.24
  89. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1037.39
  90. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1044.49
  91. Configuration

    Install/use msr-tools and set the chicken bit on all cores to enable the software workaround: wrmsr -a 0xc0011029 $(($(rdmsr -c 0xc0011029) | (1<<9))). This may cause a performance cost.

    AMD Zen 2 CPUs MSR 0xc0011029, bit 9 (chicken bit) = enabled

Event History

Jun 27, 2023
Data Sourced
via Red Hat·09:25 AM
DescriptionSeverityAffected Software
Jul 24, 2023
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·07:38 PM
Data Sourced
via MITRE·07:38 PM
Description
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 25, 2023
Data Sourced
12:00 AM
SeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2023-20593?

CVE-2023-20593 has been classified with a high severity due to its potential for exposing sensitive information.

2

How do I fix CVE-2023-20593?

To mitigate CVE-2023-20593, users should update to the latest firmware and microcode provided by AMD.

3

Which systems are affected by CVE-2023-20593?

CVE-2023-20593 primarily affects AMD Ryzen and EPYC processors, especially those under specific microarchitectural conditions.

4

Can CVE-2023-20593 be exploited remotely?

No, CVE-2023-20593 requires local authenticated access to exploit the vulnerability.

5

What types of information could be affected by CVE-2023-20593?

CVE-2023-20593 could potentially allow an attacker to access sensitive data which may include cryptographic keys or other personal information.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203