REDHAT-BUG-2217845
First published: Tue Jun 27 2023(Updated: )
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. Under specific microarchitectural circumstances, a register in “Zen 2” CPUs may not be written to 0 correctly. This may cause data from another process and/or thread to be stored in the YMM register, which may allow an attacker to potentially access sensitive information. Refer: <a href="https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html">https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AMD Zen CPUs |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html
- https://lock.cmpxchg8b.com/zenbleed.html
- https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=0bc3126c9cfa0b8c761483215c25382f831a7c6f
- https://access.redhat.com/security/cve/cve-2023-20593
- https://access.redhat.com/security/cve/CVE-2023-20593
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2226819
- https://packages.fedoraproject.org/pkgs/linux-firmware/linux-firmware/
- https://access.redhat.com/errata/RHSA-2023:4699
- https://access.redhat.com/errata/RHSA-2023:4696
- https://access.redhat.com/errata/RHSA-2023:4789
- https://access.redhat.com/errata/RHSA-2023:4821
- https://access.redhat.com/errata/RHSA-2023:4819
- https://access.redhat.com/errata/RHSA-2023:5068
- https://access.redhat.com/errata/RHSA-2023:5091
- https://access.redhat.com/errata/RHSA-2023:5069
- https://access.redhat.com/errata/RHSA-2023:5245
- https://access.redhat.com/errata/RHSA-2023:5255
- https://access.redhat.com/errata/RHSA-2023:5244
- https://access.redhat.com/errata/RHSA-2023:5419
- https://access.redhat.com/errata/RHSA-2023:5591
- https://access.redhat.com/errata/RHSA-2023:5607
- https://access.redhat.com/errata/RHSA-2023:7244
- https://access.redhat.com/errata/RHSA-2023:7389
- https://access.redhat.com/errata/RHSA-2023:7382
- https://access.redhat.com/errata/RHSA-2023:7401
- https://access.redhat.com/errata/RHSA-2023:7513
- https://access.redhat.com/errata/RHSA-2023:7551
- https://access.redhat.com/errata/RHSA-2023:7557
- https://access.redhat.com/errata/RHSA-2023:7665
- https://access.redhat.com/errata/RHSA-2023:7782
- https://access.redhat.com/errata/RHSA-2024:0402
- https://access.redhat.com/errata/RHSA-2024:0403
- https://access.redhat.com/errata/RHSA-2024:0561
- https://bugzilla.redhat.com/show_bug.cgi?id=2217845
Frequently Asked Questions
What is the severity of REDHAT-BUG-2217845?
The severity of REDHAT-BUG-2217845 is considered significant due to the potential for sensitive information disclosure.
How do I fix REDHAT-BUG-2217845?
To mitigate REDHAT-BUG-2217845, it is advised to apply the latest firmware updates and follow AMD's security guidelines for Zen 2 CPUs.
Who is affected by REDHAT-BUG-2217845?
Users of AMD Zen 2 CPUs may be affected by REDHAT-BUG-2217845 under specific microarchitectural conditions.
What type of vulnerability is REDHAT-BUG-2217845?
REHAT-BUG-2217845 is a CPU vulnerability that may allow unauthorized access to sensitive data.
What steps can I take to protect against REDHAT-BUG-2217845?
To protect against REDHAT-BUG-2217845, ensure to regularly update your system firmware and apply security patches provided by your vendor.
- agent/type
- agent/first-publish-date
- agent/event
- agent/severity
- agent/description
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-20593
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/amd
- canonical/amd zen cpus