CVE-2013-6885

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-29 · updated 2026-06-17
Weakness: CWE-399

Description

The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue.

Affected products

AMD 16H Model 00H Processor: all versions
AMD 16H Model 0Fh Processor: all versions
AMD 16H Model Processor Firmware: all versions

References

http://lists.dragonflybsd.org/pipermail/kernel/2011-December/046594.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123553.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124195.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124199.html
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
http://openwall.com/lists/oss-security/2013/11/28/1
http://rhn.redhat.com/errata/RHSA-2014-0285.html

Get alerted when CVE-2013-6885 or the next vulnerability affects your stack