What’s Vulnerable › Vulnerabilities

CVE-2023-31315

Description

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Affected products

How to fix

Upgrade to a fixed version: AMD 1st Gen AMD EPYC™ Processors naples.pi.1.0.0.m; AMD 2nd Gen AMD EPYC™ Processors rome.pi.1.0.0.j; AMD 3rd Gen AMD EPYC™ Processors milan.pi.1.0.0.d; AMD 4th Gen AMD EPYC™ Processors genoa_pi_1.0.0.c; AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics picasso-fp5.1.0.1.2, pollockpi-ft5.1.0.0.8; AMD Ryzen™ 3000 Series Desktop Processors with Radeon™ Graphics picasso-fp5.1.0.1.2; AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics comboam4v2pi.1.2.0.cb; AMD Ryzen 7000 Desktop Processors comboam5pi.1.2.0.1; AMD Ryzen 7020 Processors With Radeongraphics mendocinopi-ft6.1.0.0.7; AMD Ryzen 7030 Series-Mobile Processors With Radeon Graphics cezannepi-fp6; AMD Ryzen™ Threadripper™ 3000 Series Processors castlepeakpl-sp3r3.1.0.0.b; AMD Ryzen Threadripper Pro 3000Wx Series Processors chagallwspi-swrx8.1.0.0.8. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-31315 or the next vulnerability affects your stack