DSA-5462: -1 linux -- security update

Published Jul 30, 2023

Updated

linux - security update

Other sources

Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in AMD Zen 2 CPUs may not be written to 0 correctly. This flaw allows an attacker to leak sensitive information across concurrent processes, hyper threads and virtualized guests.

Affected Software

2 affected componentsFixes available

debian/linux

6.1.176-16.1.190-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1

Event History

Jul 30, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20593

Frequently Asked Questions

Which systems are exposed to this issue?

The issue applies to systems using AMD Zen 2 CPUs. Sensitive information may be exposed across concurrent processes, hyperthreads, and virtualized guests under specific microarchitectural circumstances.

What level of access or placement would an attacker need?

An attacker would need to execute in a context concurrent with the victim, such as another process, a sibling hyperthread, or a virtualized guest sharing the affected CPU resources.

DSA-5462: -1 linux -- security update

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are exposed to this issue?

What level of access or placement would an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What level of access or placement would an attacker need?