CVE-2023-20579

Severity: medium (CVSS 6.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-13 · updated 2026-09-02
Weakness: CWE-284

Description

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

Affected products

AMD Ryzen 3 3200U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 3250C Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 3250U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 3300U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 3350U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 4300G Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 3 4300Ge Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 3 4300U Firmware: before renoirpi-fp6_1.0.0.d — fixed in renoirpi-fp6_1.0.0.d
AMD Ryzen 3 5125C Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 5300G Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 3 5300Ge Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 3 5400U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 5425C Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 5425U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 3 7320U Firmware: before mendocinopi-ft6_1.0.0.6 — fixed in mendocinopi-ft6_1.0.0.6
AMD Ryzen 3 7335U Firmware: before rembrandtpi-fp7_1.0.0.a — fixed in rembrandtpi-fp7_1.0.0.a
AMD Ryzen 3 7440U Firmware: before phoenixpi-fp8-fp7_1.1.0.0 — fixed in phoenixpi-fp8-fp7_1.1.0.0
AMD Ryzen 5 3450U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 5 3500C Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 5 3500U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 5 3550H Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 5 3580U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 5 4500U Firmware: before renoirpi-fp6_1.0.0.d — fixed in renoirpi-fp6_1.0.0.d
AMD Ryzen 5 4600G Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 5 4600Ge Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 5 4600H Firmware: before renoirpi-fp6_1.0.0.d — fixed in renoirpi-fp6_1.0.0.d
AMD Ryzen 5 4600U Firmware: before renoirpi-fp6_1.0.0.d — fixed in renoirpi-fp6_1.0.0.d
AMD Ryzen 5 5500Gt Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c
AMD Ryzen 5 5560U Firmware: before cezannepi-fp6_1.0.1.0 — fixed in cezannepi-fp6_1.0.1.0
AMD Ryzen 5 5600G Firmware: before comboam4v2pi_1.2.0.c — fixed in comboam4v2pi_1.2.0.c

How to fix

Upgrade to a fixed version: AMD Ryzen 3 3200U Firmware cezannepi-fp6_1.0.1.0; AMD Ryzen 3 3250C Firmware cezannepi-fp6_1.0.1.0; AMD Ryzen 3 3250U Firmware cezannepi-fp6_1.0.1.0; AMD Ryzen 3 3300U Firmware cezannepi-fp6_1.0.1.0; AMD Ryzen 3 3350U Firmware cezannepi-fp6_1.0.1.0; AMD Ryzen 3 4300G Firmware comboam4v2pi_1.2.0.c; AMD Ryzen 3 4300Ge Firmware comboam4v2pi_1.2.0.c; AMD Ryzen 3 4300U Firmware renoirpi-fp6_1.0.0.d; AMD Ryzen 3 5125C Firmware cezannepi-fp6_1.0.1.0; AMD Ryzen 3 5300G Firmware comboam4v2pi_1.2.0.c; AMD Ryzen 3 5300Ge Firmware comboam4v2pi_1.2.0.c; AMD Ryzen 3 5400U Firmware cezannepi-fp6_1.0.1.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-20579 or the next vulnerability affects your stack